Questions tagged [openstack-keystone]
Openstack's identity service
22
questions
0
votes
0answers
40 views
what does 'WARNING ceilometer.transformer.conversions [-] dropping out of time order sample' mean in openstack queenss?
I have a openstack queens setup with ceilometer + gnocchi + mysql(gnocchi index) for telemetry.
I have configured publisher /etc/ceilometer/pipeline.yaml as
publishers:
gnocchi://?filter_project=...
0
votes
0answers
27 views
keystone Could not recognize Fernet token
I have installed Openstack victoria on Ubuntu server 20.04. The issue is that other services like nova and neutron are not able to authenticate with the keystone service. In the keystone log, the ...
-1
votes
1answer
33 views
How can I authenticate through application credentials to OpenStack using the CLI?
I know how to authenticate through user credentials and token to OpenStack via the openstack CLI. Now I would like to know how to use application credentials to authenticate.
Using ...
1
vote
0answers
13 views
Why don't identity providers have separate IDs and Names in Openstack?
I think most of the things have a separate ID and a separate Name in Openstack (Users, Projects, virtual machines, etc). Why don't identity providers have separate IDs and Names? Are there other ...
0
votes
1answer
44 views
containerized Openstack services
I have a difficulties in the following question:
"Does it make sense to containerized/dockerize the openstack controlling services like Neurtron/Cinder/Glance/Keystone server services (neutron-...
0
votes
0answers
24 views
Openstack authentication failure from python sdk-in jupyter notebook
I have been trying to make a simple connection to Openstack cloud using python-openstack sdk. With no success. Can someone tell me where I am going wrong? I can see that the header is sending ...
0
votes
1answer
30 views
Openstack any member of a project can delete anything from the dashboard?
Just installed Openstack victoria. Was using a previous version. For some reason I am having a bit of trouble searching the web for this question.
To the point: users who have the "members" ...
0
votes
0answers
100 views
Keystone scopes behavior is inconsistent between nova and cinder
I've been trying to update our OpenStack installation to use new options enforce_new_defaults and enforce_scope since in Wallaby for nova old policies will be deprecated. Those option seem to be ...
0
votes
0answers
26 views
Request time out for validating and showing information of the token
I could not understand what the difference of X-Auth-Token and X-Subject-Token is. I read in the documentation that "X-Auth-Token is a valid authentication token for an administrative user" ...
0
votes
1answer
95 views
Could not recognize Fernet token in token authentication
I have username and password. I would like to authentication the token. First, I sent a request to password authentication api of keystone and I got an audit_id. Then, I send a request to token ...
0
votes
0answers
58 views
Connection refused [Errno 111] when typing swift start command
When I run the swift start command this error appears
HTTPConnectionPool(host='controller', port=8080): Max retries exceeded with url: /v1/AUTH_d17698cf7bbf4dcc8fc59ed6f7b48052 (Caused by ...
0
votes
0answers
41 views
fail to find user in keystone
when I login into openstack web-ui,keystone.log shows:
(keystone.auth.core): 2021-01-23 16:31:03,362 WARNING Could not find user: admin.
(keystone.server.flask.application): 2021-01-23 16:31:03,370 ...
0
votes
1answer
17 views
Openstack: Are components related to a keystone::project auto garbage-collected upon project deletion?
Hello dear community,
in the research of how to properly delete projects and their resources via the OpenStack API I was only able to find a hint in the official python sdk, the project_purge.py (...
0
votes
1answer
1k views
Failed to discover available identity versions when contacting http://xxx.xxx.xxx.xxx:5000/v3
I've searched high and low for a resolution to this, and it seems that most people are having issues with the service not running at all or not being able to connect, which I am not having a problem ...
0
votes
2answers
540 views
OpenStack Keystone | db_sync --check return exit code 1
Hy,
I'm using Ansible OpenStack for deploy OpenStack test environment
On playbook setup-openstack.yml task os_keystone : Check current state of Keystone DB fails because exit code 1 from /openstack/...
0
votes
1answer
141 views
Migrating Devstack to subdomain cannot login to Horizon dashboard
I changed the Apache2 virtual host to put horizon on a subdomain so I can access it easier from abroad. I added the domain and subdomain to the local_settings.py for horizon and restarted horizon.
I ...
1
vote
1answer
346 views
Can't install openstack kilo, stuck on keystone installation
I'm following this guide to install a testing instance of OpenStack Kilo with a very basic environment in a VirtualBox machine running Ubuntu server 14.04 x64. I've managed to get to the point where ...
1
vote
0answers
234 views
Openstack - Restrict user access to Regions Or Zones
We are going to upgrade our OpenStack by adding a bunch of new compute nodes. These nodes sole purpose is to host 'tiny' instances for users to run some small-scale experiments or to test stuff. Those ...
1
vote
1answer
2k views
OpenStack Keystone port 5000 used by Python
I'm following official OpenStack documentation to build my first environment and got stuck in configuring Keystone (last step from http://docs.openstack.org/kilo/install-guide/install/apt/content/...
0
votes
1answer
2k views
How to solve Failed to retrieve management_url from token issue in order to login to Openstack's Horizon?
Attempt
Reading this Q&A did not solve the issue.
/etc/keystone/keystone.conf
provided if requested
/etc/openstack-dashboard/local_settings
provided if requested
User
A user has been ...
4
votes
1answer
2k views
How does OpenStack Glance work with Keystone and what exactly are these configuration options for?
I am configuring Glance to authenticate against Keystone. It works
but I am unsure exactly how some of the authentication options
interact.
I started with the configuring glance documentation, but ...
1
vote
1answer
2k views
Openstack multiple nodes: separate Glance and Keystone machines
I followed the guide on hastexo to create an OpenStack Cloud. The Keystone service and the are supposed to run on separate machines. However, when I wanted to run
glance-api in the console for ...
