Questions tagged [openstack-keystone]
Openstack's identity service
24
questions
1
vote
0
answers
61
views
Limit user scope to a project in openstack
I have an openstack victoria cloud setup. I am using default policy of keystone and have not made any changes to that policy.
I have created a test user names testuser in openstack. I assigned it ...
- 11
0
votes
1
answer
155
views
Is there a way to access my OpenStack instance without floating IP?
It seems theoretically possible for me to ssh to my instance in OpenStack through credentials and instance id/network IP(Not floating IP) etc.
Is it possible, am I missing something? Is it simply a ...
0
votes
0
answers
659
views
Openstack Wallaby: The Keystone service is temporarily unavailable
In a fresh openstack installation Nova refuses to work:
root@moscontrol:~# openstack hypervisor list
The server is currently unavailable. Please try again at a later time.<br /><br />
The ...
0
votes
0
answers
129
views
Requesting access token through OpenStack Keystone very slow
I have been trying to figure out why requesting an access token through OpenStack Keystone is relatively slow (lowest is about 400 ms to in some cases more than a second).
To get down to the cause I ...
- 101
0
votes
0
answers
161
views
How to integrate LDAP (Active Directory) with OpenStack Victoria
I have deployed OpenStack using kolla-ansible
Now, I am trying to integrate Active Directory and I have followed below docs:
https://wiki.openstack.org/wiki/HowtoIntegrateKeystonewithAD
https://docs....
0
votes
0
answers
39
views
Openstack image create cli and python sdk create different size images
I am fairly new at using the openstack APIs.
We have VMware Integrated Openstack environment where we store images in .vmdk or .qcow2 format.
As a feature of our python application, we upload the ...
- 1
-1
votes
1
answer
229
views
How can I authenticate through application credentials to OpenStack using the CLI?
I know how to authenticate through user credentials and token to OpenStack via the openstack CLI. Now I would like to know how to use application credentials to authenticate.
Using ...
- 1,695
1
vote
0
answers
22
views
Why don't identity providers have separate IDs and Names in Openstack?
I think most of the things have a separate ID and a separate Name in Openstack (Users, Projects, virtual machines, etc). Why don't identity providers have separate IDs and Names? Are there other ...
- 11
0
votes
1
answer
55
views
containerized Openstack services
I have a difficulties in the following question:
"Does it make sense to containerized/dockerize the openstack controlling services like Neurtron/Cinder/Glance/Keystone server services (neutron-...
- 27
0
votes
0
answers
27
views
Openstack authentication failure from python sdk-in jupyter notebook
I have been trying to make a simple connection to Openstack cloud using python-openstack sdk. With no success. Can someone tell me where I am going wrong? I can see that the header is sending ...
0
votes
1
answer
100
views
Openstack any member of a project can delete anything from the dashboard?
Just installed Openstack victoria. Was using a previous version. For some reason I am having a bit of trouble searching the web for this question.
To the point: users who have the "members" ...
- 233
0
votes
0
answers
473
views
Keystone scopes behavior is inconsistent between nova and cinder
I've been trying to update our OpenStack installation to use new options enforce_new_defaults and enforce_scope since in Wallaby for nova old policies will be deprecated. Those option seem to be ...
0
votes
0
answers
27
views
Request time out for validating and showing information of the token
I could not understand what the difference of X-Auth-Token and X-Subject-Token is. I read in the documentation that "X-Auth-Token is a valid authentication token for an administrative user" ...
- 19
0
votes
1
answer
372
views
Could not recognize Fernet token in token authentication
I have username and password. I would like to authentication the token. First, I sent a request to password authentication api of keystone and I got an audit_id. Then, I send a request to token ...
- 19
0
votes
1
answer
22
views
Openstack: Are components related to a keystone::project auto garbage-collected upon project deletion?
Hello dear community,
in the research of how to properly delete projects and their resources via the OpenStack API I was only able to find a hint in the official python sdk, the project_purge.py (...
- 103
0
votes
1
answer
3k
views
Failed to discover available identity versions when contacting http://xxx.xxx.xxx.xxx:5000/v3
I've searched high and low for a resolution to this, and it seems that most people are having issues with the service not running at all or not being able to connect, which I am not having a problem ...
0
votes
2
answers
935
views
OpenStack Keystone | db_sync --check return exit code 1
Hy,
I'm using Ansible OpenStack for deploy OpenStack test environment
On playbook setup-openstack.yml task os_keystone : Check current state of Keystone DB fails because exit code 1 from /openstack/...
- 63
0
votes
1
answer
165
views
Migrating Devstack to subdomain cannot login to Horizon dashboard
I changed the Apache2 virtual host to put horizon on a subdomain so I can access it easier from abroad. I added the domain and subdomain to the local_settings.py for horizon and restarted horizon.
I ...
- 1
1
vote
1
answer
363
views
Can't install openstack kilo, stuck on keystone installation
I'm following this guide to install a testing instance of OpenStack Kilo with a very basic environment in a VirtualBox machine running Ubuntu server 14.04 x64. I've managed to get to the point where ...
1
vote
0
answers
271
views
Openstack - Restrict user access to Regions Or Zones
We are going to upgrade our OpenStack by adding a bunch of new compute nodes. These nodes sole purpose is to host 'tiny' instances for users to run some small-scale experiments or to test stuff. Those ...
- 149
1
vote
1
answer
2k
views
OpenStack Keystone port 5000 used by Python
I'm following official OpenStack documentation to build my first environment and got stuck in configuring Keystone (last step from http://docs.openstack.org/kilo/install-guide/install/apt/content/...
- 121
0
votes
1
answer
2k
views
How to solve Failed to retrieve management_url from token issue in order to login to Openstack's Horizon?
Attempt
Reading this Q&A did not solve the issue.
/etc/keystone/keystone.conf
provided if requested
/etc/openstack-dashboard/local_settings
provided if requested
User
A user has been ...
- 5,691
4
votes
1
answer
2k
views
How does OpenStack Glance work with Keystone and what exactly are these configuration options for?
I am configuring Glance to authenticate against Keystone. It works
but I am unsure exactly how some of the authentication options
interact.
I started with the configuring glance documentation, but ...
- 40.4k
1
vote
1
answer
2k
views
Openstack multiple nodes: separate Glance and Keystone machines
I followed the guide on hastexo to create an OpenStack Cloud. The Keystone service and the are supposed to run on separate machines. However, when I wanted to run
glance-api in the console for ...
- 16.8k