fog log excon unauth error with osp ports

fog.log

[----] I, [2017-09-26T05:18:35.398819 #55779:88f130]  INFO -- : MIQ(ManageIQ::Providers::StorageManager::CinderManager::RefreshParser.ems_inv_to_hashes) Collecting data for EMS name: [osp-10node-bagl Cinder Manager] id: [9]...Complete
[----] E, [2017-09-26T05:28:54.606453 #53698:13ba67c] ERROR -- : excon.error     #<Excon::Error::Unauthorized: Expected([201]) <=> Actual(401 Unauthorized)
excon.error.response
  :body          => "{\"error\": {\"message\": \"The request you have made requires authentication.\", \"code\": 401, \"title\": \"Unauthorized\"}}"
  :cookies       => [
  ]
  :headers       => {
    "Content-Length"         => "114"
    "Content-Type"           => "application/json"
    "Date"                   => "Tue, 26 Sep 2017 09:28:54 GMT"
    "Server"                 => "Apache"
    "Vary"                   => "X-Auth-Token"
    "WWW-Authenticate"       => "Keystone uri=\"http://10.16.154.141:5000\""
    "x-openstack-request-id" => "req-e5c21bd1-51bc-44cf-b6b6-18b154c3da47"
  }
  :host          => "10.16.154.141"
  :local_address => "10.12.23.167"
  :local_port    => 42058
  :path          => "/v3/auth/tokens"
  :port          => 5000
  :reason_phrase => "Unauthorized"
  :remote_ip     => "10.16.154.141"
  :status        => 401
  :status_line   => "HTTP/1.1 401 Unauthorized\r\n"
>

[----] E, [2017-09-26T05:28:54.706401 #53698:13ba67c] ERROR -- : excon.error     #<Excon::Error::Unauthorized: Expected([201]) <=> Actual(401 Unauthorized)
excon.error.response
  :body          => "{\"error\": {\"message\": \"The request you have made requires authentication.\", \"code\": 401, \"title\": \"Unauthorized\"}}"
  :cookies       => [
  ]
  :headers       => {
    "Content-Length"         => "114"
    "Content-Type"           => "application/json"
    "Date"                   => "Tue, 26 Sep 2017 09:28:54 GMT"
    "Server"                 => "Apache"
    "Vary"                   => "X-Auth-Token"
    "WWW-Authenticate"       => "Keystone uri=\"http://10.16.154.141:5000\""
    "x-openstack-request-id" => "req-f21f3434-5b1d-4be9-b542-9603d610e19f"
  }
  :host          => "10.16.154.141"
  :local_address => "10.12.23.167"
  :local_port    => 42060
  :path          => "/v3/auth/tokens"
  :port          => 5000
  :reason_phrase => "Unauthorized"
  :remote_ip     => "10.16.154.141"
  :status        => 401
  :status_line   => "HTTP/1.1 401 Unauthorized\r\n"
>

[----] E, [2017-09-26T05:29:00.948905 #53698:13bca1c] ERROR -- : excon.error     #<Excon::Error::Unauthorized: Expected([201]) <=> Actual(401 Unauthorized)
excon.error.response
  :body          => "{\"error\": {\"message\": \"The request you have made requires authentication.\", \"code\": 401, \"title\": \"Unauthorized\"}}"
  :cookies       => [
  ]
  :headers       => {
    "Content-Length"         => "114"
    "Content-Type"           => "application/json"
    "Date"                   => "Tue, 26 Sep 2017 09:29:00 GMT"
    "Server"                 => "Apache"
    "Vary"                   => "X-Auth-Token"
    "WWW-Authenticate"       => "Keystone uri=\"http://10.16.154.141:5000\""
    "x-openstack-request-id" => "req-d812326a-2a38-4ba2-bb2e-c93e1ad80ad0"
  }
  :host          => "10.16.154.141"
  :local_address => "10.12.23.167"
  :local_port    => 42076
  :path          => "/v3/auth/tokens"
  :port          => 5000
  :reason_phrase => "Unauthorized"
  :remote_ip     => "10.16.154.141"
  :status        => 401
  :status_line   => "HTTP/1.1 401 Unauthorized\r\n"
>

[----] E, [2017-09-26T05:29:01.050013 #53698:13bca1c] ERROR -- : excon.error     #<Excon::Error::Unauthorized: Expected([201]) <=> Actual(401 Unauthorized)
excon.error.response
  :body          => "{\"error\": {\"message\": \"The request you have made requires authentication.\", \"code\": 401, \"title\": \"Unauthorized\"}}"
  :cookies       => [
  ]
  :headers       => {
    "Content-Length"         => "114"
    "Content-Type"           => "application/json"
    "Date"                   => "Tue, 26 Sep 2017 09:29:01 GMT"
    "Server"                 => "Apache"
    "Vary"                   => "X-Auth-Token"
    "WWW-Authenticate"       => "Keystone uri=\"http://10.16.154.141:5000\""
    "x-openstack-request-id" => "req-0f5b2018-2571-4fe4-a645-3b179d50aee9"
  }
  :host          => "10.16.154.141"
  :local_address => "10.12.23.167"
  :local_port    => 42078
  :path          => "/v3/auth/tokens"
  :port          => 5000
  :reason_phrase => "Unauthorized"
  :remote_ip     => "10.16.154.141"
  :status        => 401
  :status_line   => "HTTP/1.1 401 Unauthorized\r\n"
>

iptables hack for openstack (no floating ip for keystone)
https://gist.github.com/arcolife/6db55d44695195c20cb5ade48f919189#gistcomment-2213255

search for req id in OSP logs https://gist.github.com/arcolife/774cfbb9992956d2c48d63e69a6a3f84#file-fog-log-L14