37009b0b66
Replaced [keystone_authtoken] auth_* options with identity_uri option. This patch supersedes #125847 and no longer conflicts with #120332. Change-Id: I81cd29b5bb0d75ced2f319aa1438774a3b133c0a Co-Authored-By: Matt Kassawara <mkassawara@gmail.com>
67 lines
2.7 KiB
XML
67 lines
2.7 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<section xmlns="http://docbook.org/ns/docbook"
|
|
xmlns:xi="http://www.w3.org/2001/XInclude"
|
|
xmlns:xlink="http://www.w3.org/1999/xlink"
|
|
version="5.0"
|
|
xml:id="debconf-keystone_authtoken">
|
|
<title>Services and the [keystone_authtoken]</title>
|
|
<para>Because most OpenStack services must access the Identity
|
|
Service, you must configure the IP address of the
|
|
<code>keystone</code> server to be able to access it. You must
|
|
also configure the <code>admin_tenant_name</code>,
|
|
<code>admin_user</code>, and <code>admin_password</code> options
|
|
for each service to work.</para>
|
|
<para>Generally, this section looks like this:</para>
|
|
<programlisting language="ini">[keystone_authtoken]
|
|
auth_uri = http://<replaceable>controller</replaceable>:5000/v2.0
|
|
identity_uri = http://<replaceable>controller</replaceable>:35357
|
|
admin_tenant_name = %SERVICE_TENANT_NAME%
|
|
admin_user = %SERVICE_USER%
|
|
admin_password = %SERVICE_PASSWORD%</programlisting>
|
|
<para>The debconf system helps users configure the
|
|
<code>auth_uri</code>, <code>identity_uri</code>,
|
|
<code>admin_tenant_name</code>, <code>admin_user</code> and
|
|
<code>admin_password</code> options.</para>
|
|
<para>The following screens show an example Image Service
|
|
configuration:</para>
|
|
<informalfigure>
|
|
<mediaobject>
|
|
<imageobject>
|
|
<imagedata scale="50" fileref="figures/debconf-screenshots/service_keystone_authtoken_server_hostname.png"/>
|
|
</imageobject>
|
|
</mediaobject>
|
|
</informalfigure>
|
|
<informalfigure>
|
|
<mediaobject>
|
|
<imageobject>
|
|
<imagedata scale="50" fileref="figures/debconf-screenshots/service_keystone_authtoken_admin_tenant_name.png"/>
|
|
</imageobject>
|
|
</mediaobject>
|
|
</informalfigure>
|
|
<informalfigure>
|
|
<mediaobject>
|
|
<imageobject>
|
|
<imagedata scale="50" fileref="figures/debconf-screenshots/service_keystone_authtoken_tenant_admin_user.png"/>
|
|
</imageobject>
|
|
</mediaobject>
|
|
</informalfigure>
|
|
<informalfigure>
|
|
<mediaobject>
|
|
<imageobject>
|
|
<imagedata scale="50" fileref="figures/debconf-screenshots/service_keystone_authtoken_admin_password.png"/>
|
|
</imageobject>
|
|
</mediaobject>
|
|
</informalfigure>
|
|
<para>This information is stored in the configuration file for each
|
|
service. For example:</para>
|
|
<programlisting os="ubuntu;debian" language="ini">/etc/ceilometer/ceilometer.conf
|
|
/etc/nova/api-paste.ini
|
|
/etc/glance/glance-api-paste.ini
|
|
/etc/glance/glance-registry.ini
|
|
/etc/cinder/cinder.conf
|
|
/etc/neutron/neutron.conf</programlisting>
|
|
<para>The Debian OpenStack packages offer automation for this, so
|
|
OpenStack users do not have to manually edit the configuration
|
|
files.</para>
|
|
</section>
|