命令行裏登錄openstack的方式有兩種:
一種是密碼登錄: 在keystone裏存在已經創建的用戶和密碼
另外一種是token的方式登錄: 生成token,使用這個token登錄openstack
單獨如何安裝keystone:
生成一個token值,寫入keystone的配置文件中
# openssl rand -hex 10
寫入配置文件中
需要數據庫,安裝:
最好修改character=utf8 ,之後重啓服務
創建keystone數據庫:
MariaDB [keystone]> grant all privilegeson keystone.* to keystone@'%' identified by 'redhat';
Query OK, 0 rows affected (0.00 sec)
MariaDB [keystone]> grant all privilegeson keystone.* to keystone@'localhost' identified by 'redhat';
Query OK, 0 rows affected (0.00 sec)
MariaDB [keystone]> grant all privilegeson keystone.* to keystone@'192.168.179.140' identified by 'redhat';
Query OK, 0 rows affected (0.00 sec)
使用keystone用戶登錄到數據庫:
繼續修改keystone配置文件如下:
修改keystone的數據庫:
mysql://用戶名:密碼@數據庫的IP/數據庫名稱
keystone的服務端口,0.0.0.0 表示監聽所有的接口
管理端口35357
rabbitmq配置:
至此,配置完畢。
同步數據庫:
重啓openstack-keystone服務失敗之後
[root@osp3 keystone]# systemctl statusopenstack-keystone.service
● openstack-keystone.service - OpenStackIdentity Service (code-named Keystone)
Loaded: loaded (/usr/lib/systemd/system/openstack-keystone.service;disabled; vendor preset: disabled)
Active: failed (Result: start-limit) since Sat 2018-01-13 19:10:26 CST;52s ago
Process: 9582 ExecStart=/usr/bin/keystone-all (code=exited, status=1/FAILURE)
MainPID: 9582 (code=exited, status=1/FAILURE)
Jan 13 19:10:26 osp3.coa.com systemd[1]: Unitopenstack-keystone.service entered failed state.
Jan 13 19:10:26 osp3.coa.com systemd[1]:openstack-keystone.service failed.
Jan 13 19:10:26 osp3.coa.com systemd[1]:openstack-keystone.service holdoff time over, scheduling restart.
Jan 13 19:10:26 osp3.coa.com systemd[1]:start request repeated too quickly for openstack-keystone.service
Jan 13 19:10:26 osp3.coa.com systemd[1]:Failed to start OpenStack Identity Service (code-named Keystone).
Jan 13 19:10:26 osp3.coa.com systemd[1]: Unitopenstack-keystone.service entered failed state.
Jan 13 19:10:26 osp3.coa.com systemd[1]:openstack-keystone.service failed.
[root@osp3 keystone]# journalctl -xe
Jan 13 19:10:26 osp3.coa.comkeystone-all[9582]: File"/usr/lib/python2.7/site-packages/oslo_log/log.py", line 314, in_setup_logging_from_conf
Jan 13 19:10:26 osp3.coa.comkeystone-all[9582]: filelog = logging.handlers.WatchedFileHandler(logpath)
Jan 13 19:10:26 osp3.coa.comkeystone-all[9582]: File "/usr/lib64/python2.7/logging/handlers.py",line 392, in __init__
Jan 13 19:10:26 osp3.coa.comkeystone-all[9582]: logging.FileHandler.__init__(self, filename, mode,encoding, delay)
Jan 13 19:10:26 osp3.coa.com keystone-all[9582]:File "/usr/lib64/python2.7/logging/__init__.py", line 902, in__init__
Jan 13 19:10:26 osp3.coa.comkeystone-all[9582]: StreamHandler.__init__(self, self._open())
Jan 13 19:10:26 osp3.coa.comkeystone-all[9582]: File "/usr/lib64/python2.7/logging/__init__.py",line 925, in _open
Jan 13 19:10:26 osp3.coa.comkeystone-all[9582]: stream = open(self.baseFilename, self.mode)
Jan 1319:10:26 osp3.coa.com keystone-all[9582]: IOError: [Errno 13] Permissiondenied: '/var/log/keystone/keystone.log'
Jan 13 19:10:26 osp3.coa.com systemd[1]:openstack-keystone.service: main process exited, code=exited, status=1/FAILURE
Jan 13 19:10:26 osp3.coa.com systemd[1]:Failed to start OpenStack Identity Service (code-named Keystone).
-- Subject: Unit openstack-keystone.servicehas failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit openstack-keystone.service hasfailed.
--
-- The result is failed.
Jan 13 19:10:26 osp3.coa.com systemd[1]: Unitopenstack-keystone.service entered failed state.
Jan 13 19:10:26 osp3.coa.com systemd[1]:openstack-keystone.service failed.
Jan 13 19:10:26 osp3.coa.com systemd[1]:openstack-keystone.service holdoff time over, scheduling restart.
Jan 13 19:10:26 osp3.coa.com systemd[1]:start request repeated too quickly for openstack-keystone.service
Jan 13 19:10:26 osp3.coa.com systemd[1]:Failed to start OpenStack Identity Service (code-named Keystone).
-- Subject: Unit openstack-keystone.servicehas failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit openstack-keystone.service hasfailed.
--
-- The result is failed.
Jan 13 19:10:26 osp3.coa.com systemd[1]: Unitopenstack-keystone.service entered failed state.
Jan 13 19:10:26 osp3.coa.com systemd[1]:openstack-keystone.service failed.
修改配置文件權限:
修改日誌權限:
再次重啓: