Shulou(Shulou.com)06/01 Report--

This article mainly introduces how to install OpenStack Identity Service, has a certain reference value, interested friends can refer to, I hope you can learn a lot after reading this article, the following let the editor take you to know about it.

Identity Service (Identity Service), project name Keystone

Provide authentication and authorization services for other OpenStack services, such as Swift, and terminal directories for all services.

Provides an authentication and authorization service for other OpenStack services.

Provides a catalog of endpoints for all OpenStack services.

Because it was a test, I installed this service with the first storage node.

The hash code generated during the process can be recorded for future use, although it can be checked out by command as a novice who is not familiar with how to use it, which is very helpful.

Database Settin

Installation

Yum install mysql-server

Start

/ etc/init.d/mysqld start

Follow the prompts to set the password:

Mysqladmin-u root password'*

Directory service installation

1. Install the software package

Yum install openstack-keystone python-keystoneclient

2. Set up database connection

Openstack-config-- set / etc/keystone/keystone.conf\

Sql connection mysql://keystone:KEYSTONE_DBPASS@192.168.48.90/keystone

3. Initialize the identity service database

Openstack-db-init-service keystone-password KEYSTONE_DBPASS

(I use the same password for the KEYSTONE_DBPASS of the above two steps. According to the prompt, I guess the setting does not have to enter the actual password. This step will update the keystone.comf file)

4. Generate shared authorization tokens between identity services and other services

ADMIN_TOKEN=$ (openssl rand-hex 10)

Echo $ADMIN_TOKEN

Openstack-config-- set / etc/keystone/keystone.conf DEFAULT admin_token $ADMIN_TOKEN

(it is best to record the value of ADMIN_TOKEN)

5. Create signing keys and certificates

Keystone-manage pki_setup-- keystone-user keystone--keystone-group keystone

Chown-R keystone:keystone / etc/keystone/* / var/log/keystone/keystone.log

6. Start the service and set it to start automatically when the system starts

Service openstack-keystone start

Chkconfig openstack-keystone on

At this point, you can use: wget http://192.168.48.90:35357/v2.0 to test whether the service is working

Create users, tenant, and roles

1. Environment variable setting

Export OS_SERVICE_TOKEN=$ADMIN_TOKEN

Export OS_SERVICE_ENDPOINT= http://192.168.48.90:35357/v2.0

2. Create tenant for administrator users and other services

Keystone tenant-create-name=admin-description= "Admin Tenant"

Keystone tenant-create-name=service-description= "Service Tenant"

Create an administrator user and set the password

Keystone user-create-name=admin-pass=ADMIN_PASSWD-email=admin@example.com

4. Create an administrator role

Keystone role-create-name=admin

5. Grant roles to users

Keystone user-role-add-user=admin-tenant=admin-role=admin

Define services and API endpoints (endpoint)

1. Create an identity service entry

Keystone service-create-name=keystone-type=identity-description= "Keystone Identity Service"

This step will result in an id number

2. Keystone endpoint-create\

-- service-id=SERVICE_ID\

-- publicurl= http://192.168.48.90:5000/v2.0\

-- internalurl= http://192.168.48.90:5000/v2.0\

-- adminurl= http://192.168.48.90:35357/v2.0

Replace the ID number generated in the first step by replacing SERVICE_ID

Check whether the installation is normal

1. Eliminate environmental variables

Unset OS_SERVICE_TOKEN OS_SERVICE_ENDPOINT

2. Testing

Keystone-os-username=admin-os-password=ADMIN_PASSWD\

-- os-auth-url= http://192.168.48.90:35357/v2.0 token-get

3. Set environment variables

Export OS_USERNAME=admin

Export OS_PASSWORD=ADMIN_PASSWD

Export OS_TENANT_NAME=admin

Export OS_AUTH_URL= http://192.168.48.90:35357/v2.0

4. Test again

Keystone token-get

5. Output user list

Keystone user-list

Thank you for reading this article carefully. I hope the article "how to install OpenStack Identity Service" shared by the editor will be helpful to you. At the same time, I also hope you will support us and pay attention to the industry information channel. More related knowledge is waiting for you to learn!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.