安裝和配置認證服務

3.2.2安裝和配置認證服務目錄1.創(chuàng)建與同步數(shù)據(jù)庫4.設置環(huán)境變量3.創(chuàng)建簽名密鑰和證書2.創(chuàng)建令牌231.創(chuàng)建與同步數(shù)據(jù)庫

Host1#控制controller節(jié)點安裝軟件包[root@controller~]#yum-yinstallopenstack-keystonepython-keystoneclient41.創(chuàng)建與同步數(shù)據(jù)庫

Host1#控制controller節(jié)點創(chuàng)建keystone數(shù)據(jù)庫，使得所有主機能夠訪問并操作keystone數(shù)據(jù)庫命令如下：[root@controller~]#mysql–uroot–pmysql>CREATEDATABASEkeystone;mysql>GRANTALLPRIVILEGESONkeystone.*TO'keystone'@'localhost'IDENTIFIEDBY'KEYSTONE_DBPASS';mysql>GRANTALLPRIVILEGESONkeystone.*TO'keystone'@'%'IDENTIFIEDBY'KEYSTONE_DBPASS';mysql>exit51.創(chuàng)建與同步數(shù)據(jù)庫

Host1#控制controller節(jié)點修改/etc/keystone/keystone.conf配置文件配置數(shù)據(jù)庫連接，使Keystone服務能夠訪問MySQL數(shù)據(jù)庫。修改內(nèi)容如下：[mysql]connection=mysql://keystone:KEYSTONE_DBPASS@controller/keystone在MySQL中創(chuàng)建keystone數(shù)據(jù)庫表[root@controller~]#su-s/bin/sh-c"keystone-managedb_sync"keystone62.創(chuàng)建令牌

Host1#控制controller節(jié)點[root@controller~]#ADMIN_TOKEN=$(opensslrand-hex10)[root@controller~]#echo$ADMIN_TOKEN[root@controller~]#openstack-config--set/etc/keystone/keystone.confDEFAULTadmin_token$ADMIN_TOKEN73.創(chuàng)建簽名密鑰和證書Host1#控制controller節(jié)點[root@controller~]#keystone-managepki_setup--keystone-userkeystone--keystone-groupkeystone[root@controller~]#chown-Rkeystone:keystone/etc/keystone/ssl[root@controller~]#chmod-Ro-rwx/etc/keystone/ssl84.設置環(huán)境變量Host1#控制controller節(jié)點啟動認證服務并設置開機自啟[root@controller~]#serviceopenstack-keystonestart[root@controller~]#chkconfig

openstack-keystoneon94.設置環(huán)境變量Host1#控制controller節(jié)點設置環(huán)境變量[root@controller~]#exportOS_SERVICE_TOKEN=$ADMIN_TOKEN