64b6c9261e
Current folder name New folder name Book title ---------------------------------------------------------- basic-install DELETE cli-guide DELETE common common NEW admin-guide-cloud Cloud Administrators Guide docbkx-example DELETE openstack-block-storage-admin DELETE openstack-compute-admin DELETE openstack-config config-reference OpenStack Configuration Reference openstack-ha high-availability-guide OpenStack High Availabilty Guide openstack-image image-guide OpenStack Virtual Machine Image Guide openstack-install install-guide OpenStack Installation Guide openstack-network-connectivity-admin admin-guide-network OpenStack Networking Administration Guide openstack-object-storage-admin DELETE openstack-security security-guide OpenStack Security Guide openstack-training training-guide OpenStack Training Guide openstack-user user-guide OpenStack End User Guide openstack-user-admin user-guide-admin OpenStack Admin User Guide glossary NEW OpenStack Glossary bug: #1220407 Change-Id: Id5ffc774b966ba7b9a591743a877aa10ab3094c7 author: diane fleming
24 lines
1.5 KiB
XML
24 lines
1.5 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<section xmlns="http://docbook.org/ns/docbook"
|
|
xmlns:xi="http://www.w3.org/2001/XInclude"
|
|
xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0"
|
|
xml:id="keystone-troubleshooting">
|
|
<title>Troubleshooting Identity (Keystone)</title>
|
|
<para>If you see an error opening the signing key file, it's
|
|
possible that the person who ran <command>keystone-manage
|
|
pki_setup</command> to generate certificates and keys
|
|
isn't using the correct user. When you run
|
|
<command>keystone-manage pki_setup</command>, the Identity Service
|
|
generates a set of certificates and keys in <filename>/etc/keystone/ssl*</filename>,
|
|
which is owned by root:root.</para>
|
|
<para>This creates a problem when you try to run the Identity Service
|
|
daemon under the 'keystone' user account (nologin) when trying
|
|
to run PKI. Unless you manually chown the files
|
|
keystone:keystone or run <command>keystone-manage
|
|
pki_setup</command> with --keystone-user and
|
|
--keystone-group, you'll get an error like this:</para>
|
|
<screen><computeroutput>2012-07-31 11:10:53 ERROR [keystone.common.cms] Error opening signing key file /etc/keystone/ssl/private/signing_key.pem
|
|
140380567730016:error:0200100D:system library:fopen:Permission denied:bss_file.c:398:fopen('/etc/keystone/ssl/private/signing_key.pem','r')
|
|
140380567730016:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:400:
|
|
unable to load signing key file</computeroutput></screen>
|
|
</section> |