OpenStack Icehouse : Configure Keystone#1
2014/06/23 |
Install and Configure OpenStack Identity Service (Keystone).
|
|
[1] | Install Keystone |
[root@dlp ~]# yum --enablerepo=openstack-icehouse,epel -y install openstack-keystone openstack-utils
|
[2] | Configure Keystone |
# set database ( set any password you like for "password" section ) [root@dlp ~]# openstack-db --init --service keystone --password password Please enter the password for the 'root' MySQL user: # MariaDB root password Verified connectivity to MySQL. Creating 'keystone' database. Updating 'keystone' database password in /etc/keystone/keystone.conf Initializing the keystone database, please wait... Complete!
[root@dlp ~]#
vi /etc/keystone/keystone.conf # line 13; uncomment and change to any Token admin_token= admintoken
# line 1189: uncomment and add token_format= PKI
# line 1191-1197: uncomment all and chnage to your locations like below certfile=/etc/keystone/ssl/certs/signing_cert.pem keyfile=/etc/keystone/ssl/private/signing_key.pem ca_certs=/etc/keystone/ssl/certs/ca.pem ca_key=/etc/keystone/ssl/private/cakey.pem key_size=2048 valid_days=3650 cert_subject= /C=JP/ST=Hiroshima/L=Hiroshima/O=Server_World/CN=dlp.srv.world
keystone-manage pki_setup --keystone-user keystone --keystone-group keystone Generating RSA private key, 2048 bit long modulus ....+++ ......................................................................+++ e is 65537 (0x10001) Generating RSA private key, 2048 bit long modulus ........................+++ ...........................................................+++ e is 65537 (0x10001) Using configuration from /etc/keystone/ssl/certs/openssl.conf Check that the request matches the signature Signature ok The Subject's Distinguished Name is as follows countryName :PRINTABLE:'JP' stateOrProvinceName :ASN.1 12:'Hiroshima' localityName :ASN.1 12:'Hiroshima' organizationName :ASN.1 12:'Server_World' commonName :ASN.1 12:'dlp.srv.world' Certificate is to be certified until May 2 16:36:10 2024 GMT (3650 days) Write out database with 1 new entries Data Base Updated[root@dlp ~]# /etc/rc.d/init.d/openstack-keystone start Starting keystone: [ OK ] [root@dlp ~]# chkconfig openstack-keystone on |