If you followed prior tutorials:
You should have Keystone identity service installed. In this part of the series, we take closer look at all configuration options and parameters required in Keystone configuration file.
We won’t edit configuration files directly with text editors like nano or vim, instead we use openstack-config tool which will automate the process and make our work much simpler. Openstack-config is a utility for manipulating ini files. It comes installed with installation of openstack, the only thing you’ve to do is merely use it.
The first step is preparing database that Keystone will use. Since MariaDB database service is already installed, you have to setup the password by running mysql_secure_installation tool. You don’t require this step if you’ve working database system in your server.
Now login as root user and provide password you set above. Make sure MariaDB service is up and running:
If not, do:
Steps used to configure Keystone are namely:
- Create Database
Replace moonstack with your desired password for keystone database user.
- Configure Keystone
admintoken: This is the initial administration token.Replace with admin token you want to use, you can generate it with openssl command, like:
moonstack: Keysone database password configured in step 1,while creating keystone database.
192.168.1.60: Ip address of the controller since it’s all in one installation, equivalent to ip address of server running MySQL service.
keystone: is the database name used by keystone
- Populate the Identity service database:
Configure http server (Apache):
- Create the /etc/httpd/conf.d/wsgi-keystone.conf file
- Add services, roles and users to keystone
Replace admintoken with your token, 192.168.1.60 with your ip.
- Add admin and Member Roles:
- Add admin and service projects:
- Add admin user account and add admin user to in admin role:
- Confirm settings:
- Add service entity and API endpoints; internal,public and admin endpoints:
- Confirm settings:
You’ve completed Keystone identity service configuration. In our next article we’ll talk about complete configuration of Glance image service.