OpenStack Mitaka (三鷹) : Keystone 設定#12016/04/12 |
OpenStack Identity Service (Keystone) をインストールします。
|
|
[1] | Keystone をインストールします。 |
[root@dlp ~]# yum --enablerepo=centos-openstack-mitaka,epel -y install openstack-keystone openstack-utils python-openstackclient httpd mod_wsgi
|
[2] | Keystone 用のユーザーとデータベースを MariaDB に登録しておきます。 |
[root@dlp ~]# mysql -u root -p Enter password: Welcome to the MariaDB monitor. Commands end with ; or \g. Your MariaDB connection id is 10 Server version: 5.5.47-MariaDB MariaDB Server Copyright (c) 2000, 2015, Oracle, MariaDB Corporation Ab and others. Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
MariaDB [(none)]>
create database keystone; Query OK, 1 row affected (0.00 sec)
MariaDB [(none)]>
grant all privileges on keystone.* to keystone@'localhost' identified by 'password'; Query OK, 0 rows affected (0.00 sec)
MariaDB [(none)]>
grant all privileges on keystone.* to keystone@'%' identified by 'password'; Query OK, 0 rows affected (0.00 sec)
MariaDB [(none)]>
MariaDB [(none)]> flush privileges; Query OK, 0 rows affected (0.00 sec) exit Bye |
[3] | Keystone の基本設定です。 |
[root@dlp ~]#
vi /etc/keystone/keystone.conf # 13行目:コメント解除して適当な文字列に変更 admin_token = admintoken
# 550行目:追記 ( MariaDB に登録したもの ) connection = mysql+pymysql://keystone:password@10.0.0.30/keystone
# 1246行目:Memcache サーバー追記 [memcache]
servers = 10.0.0.30:11211
[token]
# 1984行目:追記
provider = fernet
# 2010行目:コメント解除して変更 driver = memcache
su -s /bin/bash keystone -c "keystone-manage db_sync" # Fernetキー初期化 [root@dlp ~]# keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone |
[4] | Apache httpd の基本設定です。 |
[root@dlp ~]#
vi /etc/httpd/conf/httpd.conf # 95行目:コメント解除しサーバー名指定 ServerName dlp.srv.world:80
[root@dlp ~]#
vi /etc/httpd/conf.d/wsgi-keystone.conf # 以下の内容で新規作成 Listen 5000 Listen 35357 <VirtualHost *:5000> WSGIDaemonProcess keystone-public processes=5 threads=1 user=keystone group=keystone display-name=%{GROUP} WSGIProcessGroup keystone-public WSGIScriptAlias / /usr/bin/keystone-wsgi-public WSGIApplicationGroup %{GLOBAL} WSGIPassAuthorization On <IfVersion >= 2.4> ErrorLogFormat "%{cu}t %M" </IfVersion> ErrorLog /var/log/httpd/keystone-error.log CustomLog /var/log/httpd/keystone-access.log combined <Directory /usr/bin> <IfVersion >= 2.4> Require all granted </IfVersion> <IfVersion < 2.4> Order allow,deny Allow from all </IfVersion> </Directory> </VirtualHost> <VirtualHost *:35357> WSGIDaemonProcess keystone-admin processes=5 threads=1 user=keystone group=keystone display-name=%{GROUP} WSGIProcessGroup keystone-admin WSGIScriptAlias / /usr/bin/keystone-wsgi-admin WSGIApplicationGroup %{GLOBAL} WSGIPassAuthorization On <IfVersion >= 2.4> ErrorLogFormat "%{cu}t %M" </IfVersion> ErrorLog /var/log/httpd/keystone-error.log CustomLog /var/log/httpd/keystone-access.log combined <Directory /usr/bin> <IfVersion >= 2.4> Require all granted </IfVersion> <IfVersion < 2.4> Order allow,deny Allow from all </IfVersion> </Directory> </VirtualHost> systemctl start httpd [root@dlp ~]# systemctl enable httpd |
Sponsored Link |
|