OpenStack Liberty : Configure Keystone#1
2015/12/23 |
Install and Configure OpenStack Identity Service (Keystone).
|
|
[1] | Install Keystone. |
root@dlp:~# echo "manual" > /etc/init/keystone.override root@dlp:~# apt-get -y install keystone python-openstackclient apache2 libapache2-mod-wsgi
|
[2] | Add a User and Database on MariaDB for Keystone. |
root@dlp:~# mysql -u root -p Enter password: Welcome to the MariaDB monitor. Commands end with ; or \g. Your MariaDB connection id is 28 Server version: 5.5.46-MariaDB-1ubuntu0.14.04.2 (Ubuntu) Copyright (c) 2000, 2015, Oracle, MariaDB Corporation Ab and others. Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
MariaDB [(none)]>
create database keystone; Query OK, 1 row affected (0.00 sec)
MariaDB [(none)]>
grant all privileges on keystone.* to keystone@'localhost' identified by 'password'; Query OK, 0 rows affected (0.00 sec)
MariaDB [(none)]>
grant all privileges on keystone.* to keystone@'%' identified by 'password'; Query OK, 0 rows affected (0.00 sec)
MariaDB [(none)]>
MariaDB [(none)]> flush privileges; Query OK, 0 rows affected (0.00 sec) exit Bye |
[3] | Configure Keystone. |
root@dlp:~#
vi /etc/keystone/keystone.conf # line 12: uncomment and change to any Token admin_token = admintoken
# line 497: add follows ( MariaDB connection info ) connection = mysql+pymysql://keystone:password@10.0.0.30/keystone
# line 1301: add Memcache server [memcache]
servers = 10.0.0.30:11211
# line 1905: uncomment provider = uuid # line 1910: uncomment driver = sql su -s /bin/bash keystone -c "keystone-manage db_sync" |
[4] | Configure Apache httpd. |
root@dlp:~#
vi /etc/apache2/apache2.conf # line 70: add own hostname ServerName dlp.srv.world
root@dlp:~#
vi /etc/apache2/sites-available/wsgi-keystone.conf # create new like follows Listen 5000 Listen 35357 <VirtualHost *:5000> WSGIDaemonProcess keystone-public processes=5 threads=1 user=keystone group=keystone display-name=%{GROUP} WSGIProcessGroup keystone-public WSGIScriptAlias / /usr/bin/keystone-wsgi-public WSGIApplicationGroup %{GLOBAL} WSGIPassAuthorization On <IfVersion >= 2.4> ErrorLogFormat "%{cu}t %M" </IfVersion> ErrorLog /var/log/apache2/keystone.log CustomLog /var/log/apache2/keystone_access.log combined <Directory /usr/bin> <IfVersion >= 2.4> Require all granted </IfVersion> <IfVersion < 2.4> Order allow,deny Allow from all </IfVersion> </Directory> </VirtualHost> <VirtualHost *:35357> WSGIDaemonProcess keystone-admin processes=5 threads=1 user=keystone group=keystone display-name=%{GROUP} WSGIProcessGroup keystone-admin WSGIScriptAlias / /usr/bin/keystone-wsgi-admin WSGIApplicationGroup %{GLOBAL} WSGIPassAuthorization On <IfVersion >= 2.4> ErrorLogFormat "%{cu}t %M" </IfVersion> ErrorLog /var/log/apache2/keystone.log CustomLog /var/log/apache2/keystone_access.log combined <Directory /usr/bin> <IfVersion >= 2.4> Require all granted </IfVersion> <IfVersion < 2.4> Order allow,deny Allow from all </IfVersion> </Directory> </VirtualHost> a2ensite wsgi-keystone Enabling site wsgi-keystone. To activate the new configuration, you need to run: service apache2 reloadroot@dlp:~# /etc/init.d/apache2 restart * Restarting web server apache2 |