Shulou(Shulou.com)06/01 Report--

1. Log in to the database as root user, create the database keystone, authorize the database, and set the password to keyston_dbpass

2. Keystone authentication service uses an Apache HTTP server with mod_wsgi to serve authentication service requests, with ports 5000 and 35357. Therefore, the corresponding software package needs to be installed on the controller node.

4. Use the command to generate a random password token

3. Edit / etc/keystone/keystone.conf

1) define the value of the initial management token in [DEFAULT]:

2) in the [database] section, configure database access:

3) in the [token] section, configure the provider of the Fernet UUID token.

4. Initialize the authentication server database and ignore the output information here

5. Initialize Fernet keys:

6. Configure the Apache server, edit the / etc/httpd/conf/httpd.conf file, and change the configuration ServerName hostname to controller (about line 95 of the file)

7. Create and edit / etc/httpd/conf.d/wsgi-keystone.conf

8. Start the Apache service and set it to boot automatically.

9. Configure authentication token, endpoint URL, authentication API version

10. Create a service entity and authentication service:

11. Create the API endpoint of the authentication service:

12. Create a domain default

Create managed projects, users, and roles

1) create an admin project

2) create an admin user

3) create an admin role

4) add admin users to admin projects and users

14. Create a service project

15. Create demo projects and users

1) create a demo project

2) create a demo user

3) create a user role

4) add user roles to demo projects and roles

16. Close the temporary authentication token mechanism

1) Edit / etc/keystone/keystone-paste.ini, as shown below

2) reset the OS_TOKEN and OS_URL environment variables:

3) request an authentication token with the admin user (this password is the password set in step 13)

4) request an authentication token with the demo user (this password is the password set in step 15)

17. Create and verify the script

1) create an admin-openrc

2) create a demo-openrc

3) load admin-openrc environment variables and admin projects and certificates, and request authentication tokens

18. For the problems that may be encountered, I deliberately type the password incorrectly here, and there will be an error of 401. When you encounter an error of 401, you can check whether the user name and password match.

This chapter refers to http://docs.openstack.org/mitaka/zh_CN/install-guide-rdo/keystone.html. It should also be noted that the content written in this chapter is operated on the controller node and does not involve other hosts. The next chapter will install and deploy the image service.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.