http://wiki.define-technology.com/mediawiki-1.35.0/index.php?action=history&feed=atom&title=OpenStack%3A_Managing_Users_with_Keystone 2026-05-05T00:02:34Z Revision history for this page on the wiki MediaWiki 1.35.0 http://wiki.define-technology.com/mediawiki-1.35.0/index.php?title=OpenStack:_Managing_Users_with_Keystone&diff=6931&oldid=prev 2015-04-28T09:35:09Z

<p><span dir="auto"><span class="autocomment">Source script</span></span></p> <table class="diff diff-contentalign-left diff-editfont-monospace" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 09:35, 28 April 2015</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l58" >Line 58:</td> <td colspan="2" class="diff-lineno">Line 58:</td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>[root@server2-a ~]# source /root/keystonerc_admin  </div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>[root@server2-a ~]# source /root/keystonerc_admin  </div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>[root@server2-a ~(keystone_admin)]$  </div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>[root@server2-a ~(keystone_admin)]$  </div></td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">&lt;/syntaxhighlight&gt;</del></div></td><td colspan="2"> </td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">&lt;syntaxhighlight&gt;</del></div></td><td colspan="2"> </td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">[root@server2-a ~(keystone_admin)]$ keystone user-list</del></div></td><td colspan="2"> </td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">Authorization Failed: Unable to establish connection to http://server2-a.exmaple.com:35357/v2.0/tokens</del></div></td><td colspan="2"> </td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">[root@server2-a ~(keystone_admin)]$ export SERVICE_ENDPOINT=http://server2-a.example.com:35357/v2.0</del></div></td><td colspan="2"> </td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">[root@server2-a ~(keystone_admin)]$ keystone user-list</del></div></td><td colspan="2"> </td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">Expecting a token provided via either --os-token or env[OS_SERVICE_TOKEN]</del></div></td><td colspan="2"> </td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">[root@server2-a ~(keystone_admin)]$ source /root/keystonerc_token </del></div></td><td colspan="2"> </td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>[root@server2-a ~(keystone_token)]$ keystone user-list</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>[root@server2-a ~(keystone_token)]$ keystone user-list</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>+----------------------------------+-------+---------+-------+</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>+----------------------------------+-------+---------+-------+</div></td></tr> </table>

Jon http://wiki.define-technology.com/mediawiki-1.35.0/index.php?title=OpenStack:_Managing_Users_with_Keystone&diff=6921&oldid=prev 2015-04-28T09:34:12Z

<p>Created page with &quot;== Create Admin User == &lt;syntaxhighlight&gt; [root@server2-a ~]# keystone user-create --name admin --pass redhat +----------+----------------------------------+ | Property | Va...&quot;</p> <p><b>New page</b></p><div>== Create Admin User ==<br /> &lt;syntaxhighlight&gt;<br /> [root@server2-a ~]# keystone user-create --name admin --pass redhat<br /> +----------+----------------------------------+<br /> | Property | Value |<br /> +----------+----------------------------------+<br /> | email | |<br /> | enabled | True |<br /> | id | 3c685964950a4d6e927c08568d4d81b6 |<br /> | name | admin |<br /> | username | admin |<br /> +----------+----------------------------------+<br /> &lt;/syntaxhighlight&gt;<br /> <br /> == Create Admin role ==<br /> &lt;syntaxhighlight&gt;<br /> [root@server2-a ~]# keystone role-create --name admin<br /> +----------+----------------------------------+<br /> | Property | Value |<br /> +----------+----------------------------------+<br /> | id | aa517e1dd8734414bbf35e834a16d952 |<br /> | name | admin |<br /> +----------+----------------------------------+<br /> &lt;/syntaxhighlight&gt;<br /> <br /> == Create Admin tenant ==<br /> &lt;syntaxhighlight&gt;<br /> [root@server2-a ~]# keystone tenant-create --name admin<br /> +-------------+----------------------------------+<br /> | Property | Value |<br /> +-------------+----------------------------------+<br /> | description | |<br /> | enabled | True |<br /> | id | 4413e2678de04e1a81ee4d9149a8d916 |<br /> | name | admin |<br /> +-------------+----------------------------------+<br /> &lt;/syntaxhighlight&gt;<br /> <br /> == Add user for the admin tenant to the admin role ==<br /> &lt;syntaxhighlight&gt;<br /> [root@server2-a ~]# keystone user-role-add --user admin --role admin --tenant admin<br /> &lt;/syntaxhighlight&gt;<br /> <br /> == Create keystonerc_admin script ==<br /> &lt;syntaxhighlight&gt;<br /> [root@server2-a ~]# cat &gt;&gt; /root/keystonerc_admin &lt;&lt; EOF<br /> &gt; unset SERVICE_TOKEN SERVICE_ENDPOINT<br /> &gt; export OS_USERNAME=admin<br /> &gt; export OS_TENANT_NAME=admin<br /> &gt; export OS_PASSWORD=redhat<br /> &gt; export OS_AUTH_URL=http://server2-a.example.com:35357/v2.0/<br /> &gt; export PS1=&#039;[\u@\h \W(keystone_admin)]\$ &#039;<br /> &gt; EOF<br /> &lt;/syntaxhighlight&gt;<br /> <br /> == Source script ==<br /> &lt;syntaxhighlight&gt;<br /> [root@server2-a ~]# source /root/keystonerc_admin <br /> [root@server2-a ~(keystone_admin)]$ <br /> &lt;/syntaxhighlight&gt;<br /> &lt;syntaxhighlight&gt;<br /> [root@server2-a ~(keystone_admin)]$ keystone user-list<br /> Authorization Failed: Unable to establish connection to http://server2-a.exmaple.com:35357/v2.0/tokens<br /> [root@server2-a ~(keystone_admin)]$ export SERVICE_ENDPOINT=http://server2-a.example.com:35357/v2.0<br /> [root@server2-a ~(keystone_admin)]$ keystone user-list<br /> Expecting a token provided via either --os-token or env[OS_SERVICE_TOKEN]<br /> [root@server2-a ~(keystone_admin)]$ source /root/keystonerc_token <br /> [root@server2-a ~(keystone_token)]$ keystone user-list<br /> +----------------------------------+-------+---------+-------+<br /> | id | name | enabled | email |<br /> +----------------------------------+-------+---------+-------+<br /> | 3c685964950a4d6e927c08568d4d81b6 | admin | True | |<br /> +----------------------------------+-------+---------+-------+<br /> [root@server2-a ~(keystone_token)]$ <br /> &lt;/syntaxhighlight&gt;</div>

Jon