Manual installation of Keystone

Controller

Yum Install Openstack-keystone python-keystoneclient-y

Openstack-config--set/etc/keystone/keystone.conf \

Database connection Mysql://keystone:[email Protected]/keystone

Mysql-u Root-popenstack

mysql> CREATE DATABASE Keystone;

Mysql> GRANT all privileges in keystone.* to ' keystone ' @ ' localhost ' \

Identified by ' OpenStack ';

Mysql> GRANT all privileges in keystone.* to ' keystone ' @ '% ' \

Identified by ' OpenStack ';

Mysql> exit

Su-s/bin/sh-c "Keystone-manage Db_sync" Keystone

Openstack-config--set/etc/keystone/keystone.conf DEFAULT Admin_token $ADMIN _token

Keystone-manage Pki_setup--keystone-user Keystone--keystone-group Keystone

Chown-r Keystone:keystone/etc/keystone/ssl

Chmod-r O-rwx/etc/keystone/ssl

Service Openstack-keystone Start

Chkconfig Openstack-keystone on

(Crontab-l-u Keystone 2>&1 | grep-q token_flush) | | \

Echo ' @hourly/usr/bin/keystone-manage token_flush >/var/log/keystone/

Keystone-tokenflush.log 2>&1 ' >>/var/spool/cron/keystone

Export os_service_token= $ADMIN _token

Export os_service_endpoint=http://10.0.0.10:35357/v2.0

Create an administrator user

Eystone user-create--name=admin--pass=admin [email protected]

Create Administrator role

Keystone Role-create--name=admin

Create an administrator tenant

Keystone Tenant-create--name=admin--description= "admin tenant"

Bind user role An administrator role an ordinary user role

Keystone User-role-add--user=admin--tenant=admin--role=admin

Keystone User-role-add--user=admin--role=_member_--tenant=admin

Create a normal user

Keystone User-create--name=demo--pass=demo [email protected]

Keystone Tenant-create--name=demo--description= "Demo Tenant"

Keystone User-role-add--user=demo--role=_member_--tenant=demo

Create a service tenant

Keystone Tenant-create--name=service--description= "service Tenant"

Create a certification service

Keystone Service-create--name=keystone--type=identity--description= "OpenStack identity"

Create a port for the authentication service

Keystone endpoint-create \

--service-id=$ (Keystone Service-list | awk '/identity/{print $} ') \

--publicurl=http://controller:5000/v2.0 \

--internalurl=http://controller:5000/v2.0 \

--adminurl=http://controller:35357/v2.0

unset Os_service_token Os_service_endpoint

Keystone--os-username=admin--os-password=admin--os-auth-url=http://10.0.0.10:35357/v2.0 token-get

Keystone--os-username=admin--os-password=admin \

--os-tenant-name=admin--os-auth-url=http://controller:35357/v2.0 Token-get

Vim admin-openrc.sh

Export Os_username=admin

Export Os_password=admin

Export Os_tenant_name=admin

Export os_auth_url=http://10.0.0.10:35357/v2.0

SOURCE admin-openrc.sh

Vim demo-openrc.sh

Export Os_username=demo

Export Os_password=demo

Export Os_tenant_name=demo

Export os_auth_url=http://10.0.0.10:35357/v2.0

Keystone Token-get

Keystone User-list

Keystone user-role-list--user Admin--tenant admin

This article is from the "Gaogaozi" blog, make sure to keep this source http://hangtiangazi.blog.51cto.com/8584103/1671824

Manual installation of Keystone