Questions tagged [openstack-keystone]

Openstack's identity service

Filter by
Sorted by
Tagged with
1 vote
0 answers
61 views

Limit user scope to a project in openstack

I have an openstack victoria cloud setup. I am using default policy of keystone and have not made any changes to that policy. I have created a test user names testuser in openstack. I assigned it ...
user avatar
0 votes
1 answer
155 views

Is there a way to access my OpenStack instance without floating IP?

It seems theoretically possible for me to ssh to my instance in OpenStack through credentials and instance id/network IP(Not floating IP) etc. Is it possible, am I missing something? Is it simply a ...
user avatar
0 votes
0 answers
659 views

Openstack Wallaby: The Keystone service is temporarily unavailable

In a fresh openstack installation Nova refuses to work: root@moscontrol:~# openstack hypervisor list The server is currently unavailable. Please try again at a later time.<br /><br /> The ...
user avatar
0 votes
0 answers
129 views

Requesting access token through OpenStack Keystone very slow

I have been trying to figure out why requesting an access token through OpenStack Keystone is relatively slow (lowest is about 400 ms to in some cases more than a second). To get down to the cause I ...
user avatar
  • 101
0 votes
0 answers
161 views

How to integrate LDAP (Active Directory) with OpenStack Victoria

I have deployed OpenStack using kolla-ansible Now, I am trying to integrate Active Directory and I have followed below docs: https://wiki.openstack.org/wiki/HowtoIntegrateKeystonewithAD https://docs....
user avatar
0 votes
0 answers
39 views

Openstack image create cli and python sdk create different size images

I am fairly new at using the openstack APIs. We have VMware Integrated Openstack environment where we store images in .vmdk or .qcow2 format. As a feature of our python application, we upload the ...
user avatar
  • 1
-1 votes
1 answer
229 views

How can I authenticate through application credentials to OpenStack using the CLI?

I know how to authenticate through user credentials and token to OpenStack via the openstack CLI. Now I would like to know how to use application credentials to authenticate. Using ...
user avatar
  • 1,695
1 vote
0 answers
22 views

Why don't identity providers have separate IDs and Names in Openstack?

I think most of the things have a separate ID and a separate Name in Openstack (Users, Projects, virtual machines, etc). Why don't identity providers have separate IDs and Names? Are there other ...
user avatar
  • 11
0 votes
1 answer
55 views

containerized Openstack services

I have a difficulties in the following question: "Does it make sense to containerized/dockerize the openstack controlling services like Neurtron/Cinder/Glance/Keystone server services (neutron-...
user avatar
  • 27
0 votes
0 answers
27 views

Openstack authentication failure from python sdk-in jupyter notebook

I have been trying to make a simple connection to Openstack cloud using python-openstack sdk. With no success. Can someone tell me where I am going wrong? I can see that the header is sending ...
user avatar
0 votes
1 answer
100 views

Openstack any member of a project can delete anything from the dashboard?

Just installed Openstack victoria. Was using a previous version. For some reason I am having a bit of trouble searching the web for this question. To the point: users who have the "members" ...
user avatar
  • 233
0 votes
0 answers
473 views

Keystone scopes behavior is inconsistent between nova and cinder

I've been trying to update our OpenStack installation to use new options enforce_new_defaults and enforce_scope since in Wallaby for nova old policies will be deprecated. Those option seem to be ...
user avatar
0 votes
0 answers
27 views

Request time out for validating and showing information of the token

I could not understand what the difference of X-Auth-Token and X-Subject-Token is. I read in the documentation that "X-Auth-Token is a valid authentication token for an administrative user" ...
user avatar
  • 19
0 votes
1 answer
372 views

Could not recognize Fernet token in token authentication

I have username and password. I would like to authentication the token. First, I sent a request to password authentication api of keystone and I got an audit_id. Then, I send a request to token ...
user avatar
  • 19
0 votes
1 answer
22 views

Openstack: Are components related to a keystone::project auto garbage-collected upon project deletion?

Hello dear community, in the research of how to properly delete projects and their resources via the OpenStack API I was only able to find a hint in the official python sdk, the project_purge.py (...
user avatar
0 votes
1 answer
3k views

Failed to discover available identity versions when contacting http://xxx.xxx.xxx.xxx:5000/v3

I've searched high and low for a resolution to this, and it seems that most people are having issues with the service not running at all or not being able to connect, which I am not having a problem ...
user avatar
0 votes
2 answers
935 views

OpenStack Keystone | db_sync --check return exit code 1

Hy, I'm using Ansible OpenStack for deploy OpenStack test environment On playbook setup-openstack.yml task os_keystone : Check current state of Keystone DB fails because exit code 1 from /openstack/...
user avatar
  • 63
0 votes
1 answer
165 views

Migrating Devstack to subdomain cannot login to Horizon dashboard

I changed the Apache2 virtual host to put horizon on a subdomain so I can access it easier from abroad. I added the domain and subdomain to the local_settings.py for horizon and restarted horizon. I ...
user avatar
  • 1
1 vote
1 answer
363 views

Can't install openstack kilo, stuck on keystone installation

I'm following this guide to install a testing instance of OpenStack Kilo with a very basic environment in a VirtualBox machine running Ubuntu server 14.04 x64. I've managed to get to the point where ...
user avatar
1 vote
0 answers
271 views

Openstack - Restrict user access to Regions Or Zones

We are going to upgrade our OpenStack by adding a bunch of new compute nodes. These nodes sole purpose is to host 'tiny' instances for users to run some small-scale experiments or to test stuff. Those ...
user avatar
  • 149
1 vote
1 answer
2k views

OpenStack Keystone port 5000 used by Python

I'm following official OpenStack documentation to build my first environment and got stuck in configuring Keystone (last step from http://docs.openstack.org/kilo/install-guide/install/apt/content/...
user avatar
0 votes
1 answer
2k views

How to solve Failed to retrieve management_url from token issue in order to login to Openstack's Horizon?

Attempt Reading this Q&A did not solve the issue. /etc/keystone/keystone.conf provided if requested /etc/openstack-dashboard/local_settings provided if requested User A user has been ...
user avatar
  • 5,691
4 votes
1 answer
2k views

How does OpenStack Glance work with Keystone and what exactly are these configuration options for?

I am configuring Glance to authenticate against Keystone. It works but I am unsure exactly how some of the authentication options interact. I started with the configuring glance documentation, but ...
user avatar
  • 40.4k
1 vote
1 answer
2k views

Openstack multiple nodes: separate Glance and Keystone machines

I followed the guide on hastexo to create an OpenStack Cloud. The Keystone service and the are supposed to run on separate machines. However, when I wanted to run glance-api in the console for ...
user avatar