OpenStack Havana - Keystone 設定#12013/10/22 |
OpenStack Identity Service (Keystone) をインストールします。
|
|
[1] | Keystone インストール |
# EPEL OpenStack, EPELからインストール [root@dlp ~]# yum --enablerepo=openstack-havana,epel -y install openstack-keystone openstack-utils
|
[2] | Keystone の基本設定 |
# データベース設定 (「password」は任意のパスワードを設定) [root@dlp ~]# openstack-db --init --service keystone --password password Please enter the password for the 'root' MySQL user: # MySQL root パスワード Verified connectivity to MySQL. Creating 'keystone' database. Updating 'keystone' database password in /etc/keystone/keystone.conf Initializing the keystone database, please wait... Complete!
[root@dlp ~]#
vi /etc/keystone/keystone.conf # 3行目:コメント解除して適当な文字列に変更 admin_token = admintoken
# 6行目:コメント解除 bind_host = 0.0.0.0 # 9行目:コメント解除 public_port = 5000 # 12行目:コメント解除 admin_port = 35357 # 20行目:コメント解除 compute_port = 8774 # 310行目:コメント解除して追記 token_format = PKI
# 312行目:全てコメント解除して地域情報等を変更 certfile = /etc/keystone/pki/certs/signing_cert.pem keyfile = /etc/keystone/pki/private/signing_key.pem ca_certs = /etc/keystone/pki/certs/cacert.pem ca_key = /etc/keystone/pki/private/cakey.pem key_size = 2048 valid_days = 3650 cert_subject = /C=JP/ST=Hiroshima/L=Hiroshima/O=Server_World/CN=dlp.srv.world
keystone-manage pki_setup --keystone-user keystone --keystone-group keystone 2013-10-22 19:30:28.215 2276 INFO keystone.common.openssl [-] openssl req -key /etc/keystone/pki/private/signing_key.pem -new -out /etc/keystone/pki/certs/req.pem -config /etc/keystone/pki/certs/openssl.conf -subj /C=JP/ST=Hiroshima/L=Hiroshima/O=Server_World/CN=dlp.srv.world 2013-10-22 19:30:28.229 2276 INFO keystone.common.openssl [-] openssl ca -batch -out /etc/keystone/pki/certs/signing_cert.pem -config /etc/keystone/pki/certs/openssl.conf -days 3650d -cert /etc/keystone/pki/certs/cacert.pem -keyfile /etc/keystone/pki/private/cakey.pem -infiles /etc/keystone/pki/certs/req.pem Using configuration from /etc/keystone/pki/certs/openssl.conf Check that the request matches the signature Signature ok The Subject's Distinguished Name is as follows countryName :PRINTABLE:'JP' stateOrProvinceName :ASN.1 12:'Hiroshima' localityName :ASN.1 12:'Hiroshima' organizationName :ASN.1 12:'Server_World' commonName :ASN.1 12:'dlp.srv.world' Certificate is to be certified until Oct 20 10:30:28 2023 GMT (3650 days) Write out database with 1 new entries Data Base Updated[root@dlp ~]# /etc/rc.d/init.d/openstack-keystone start Starting keystone: [ OK ] [root@dlp ~]# chkconfig openstack-keystone on |
Sponsored Link |
|