3-openstack之keystone上
3.1 keystone
安装linux-node1上面
3.2 配置源
|
1
2
|
http:
//mirrors
.aliyun.com
/centos/7
.2.1511
/cloud/x86_64/openstack-newton/centos-release-openstack-newton-1-1
.el7.noarch.rpm
yumlocalinstall -y centos-release-openstack-newton-1-1.el7.noarch.rpm
|
安装：
|
1
2
|
yuminstall -y openstack-keystone httpd mod_wsgi memcached python-memcached
python-openstackclient
|
3.3 配置认证机制和数据库连接
|
1
2
3
4
5
6
|
[root@linux-node1~]
# openssl rand -hex 10 #生成token
0eed56d434cbac30394c
[root@linux-node1~]
# grep -E "^[a-Z]" /etc/keystone/keystone.conf #修改如下的位置
admin_token= 0eed56d434cbac30394c
connection= mysql:
//keystone
:keystone@192.168.56.11
/keystone
[root@linux-node1~]
#
|
3.4 生成keystone的数据表和日志
|
1
2
3
4
5
|
su
-s
/bin/sh
-c
"keystone-manage db_sync"
keystone
作用：初始化数据库（keystone）的表结构和生成keystone的日志文件
[root@linux-node1 ~]
# ll /var/log/keystone/keystone.log
-rw-rw---- 1 keystone keystone 16296 Dec 17 16:39
/var/log/keystone/keystone
.log
#keystone启动会向这个文件写入东西，所以是keystone用户来生成否则启动不起来
|
3.5查看keystone初始化的数据库
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
|
[root@linux-node1 ~]
# mysql -h 192.168.56.11 -ukeystone -pkeystone -e "use keystone;show tables;"
+------------------------+
| Tables_in_keystone |
+------------------------+
| access_token |
| assignment |
| config_register |
| consumer |
| credential |
| endpoint |
| endpoint_group |
| federated_user |
| federation_protocol |
| group |
| id_mapping |
| identity_provider |
| idp_remote_ids |
| implied_role |
| local_user |
| mapping |
| migrate_version |
| nonlocal_user |
| password |
| policy |
| policy_association |
| project |
| project_endpoint |
| project_endpoint_group |
| region |
| request_token |
| revocation_event |
| role |
| sensitive_config |
| service |
| service_provider |
| token |
| trust |
| trust_role |
| user |
| user_group_membership |
| whitelisted_config |
|
本文转自 小小三郎1 51CTO博客，原文链接：http://blog.51cto.com/wsxxsl/1883606，如需转载请自行联系原作者
