Questions tagged [openstack-keystone]

Openstack's identity service

Filter by
Sorted by
Tagged with
0 votes
0 answers
21 views

Openstack tokenless x509 auth

I would like to implement tokenless authorization according to: tokenless_pike, tokenless_v2023. My goal is to obtain fernet token using x509 certificate. After configuration, according to the first ...
0 votes
0 answers
78 views

Openstack Keystone as a Service Provider, 401 - Unauthorized Exception for SSO

We're currently working on implementing SSO for our university's OpenStack environment using OpenStack Ansible (Yoga version). Our goal is to allow students to log in with their university credentials ...
0 votes
1 answer
177 views

Openstack instance launch with self signed certificate throwing nova api error

trying to build a test environment with openstack:antelope on three nodes; controller, compute and networking. everything seems to be set up fine except i use a self-signed certificate and when i ...
0 votes
0 answers
26 views

packstack openstack ussuri cannot use cli

I installed packstack openstack ussri on my virtual box without any issue (CLI and dashboard). When I tried to install it on my company's environment, I can't use CLI commands. There was no error in ...
0 votes
0 answers
288 views

Getting " no such table: cell_mappings" error while installing nova

I was following the product documentation "https://docs.openstack.org/nova/2023.1/install/verify.html" after the nova installation is complete on my controller and compute node Iam seeing ...
1 vote
1 answer
464 views

Limit user scope to a project in openstack

I have an openstack victoria cloud setup. I am using default policy of keystone and have not made any changes to that policy. I have created a test user names testuser in openstack. I assigned it ...
0 votes
1 answer
739 views

OpenStack Queens: Horizon Fails after rebooting the controller node

The controller node was rebooted and some VMs were running. After that, when logging to Horizon, I keep receiving the following error: Error: Unable to retrieve instances. And I can no longer see the ...
0 votes
1 answer
717 views

Is there a way to access my OpenStack instance without floating IP?

It seems theoretically possible for me to ssh to my instance in OpenStack through credentials and instance id/network IP(Not floating IP) etc. Is it possible, am I missing something? Is it simply a ...
0 votes
0 answers
3k views

Openstack Wallaby: The Keystone service is temporarily unavailable

In a fresh openstack installation Nova refuses to work: root@moscontrol:~# openstack hypervisor list The server is currently unavailable. Please try again at a later time.<br /><br /> The ...
0 votes
0 answers
301 views

Requesting access token through OpenStack Keystone very slow

I have been trying to figure out why requesting an access token through OpenStack Keystone is relatively slow (lowest is about 400 ms to in some cases more than a second). To get down to the cause I ...
-1 votes
1 answer
1k views

How can I authenticate through application credentials to OpenStack using the CLI?

I know how to authenticate through user credentials and token to OpenStack via the openstack CLI. Now I would like to know how to use application credentials to authenticate. Using ...
1 vote
0 answers
41 views

Why don't identity providers have separate IDs and Names in Openstack?

I think most of the things have a separate ID and a separate Name in Openstack (Users, Projects, virtual machines, etc). Why don't identity providers have separate IDs and Names? Are there other ...
0 votes
1 answer
75 views

containerized Openstack services

I have a difficulties in the following question: "Does it make sense to containerized/dockerize the openstack controlling services like Neurtron/Cinder/Glance/Keystone server services (neutron-...
0 votes
0 answers
35 views

Openstack authentication failure from python sdk-in jupyter notebook

I have been trying to make a simple connection to Openstack cloud using python-openstack sdk. With no success. Can someone tell me where I am going wrong? I can see that the header is sending ...
0 votes
1 answer
398 views

Openstack any member of a project can delete anything from the dashboard?

Just installed Openstack victoria. Was using a previous version. For some reason I am having a bit of trouble searching the web for this question. To the point: users who have the "members" ...
0 votes
0 answers
1k views

Keystone scopes behavior is inconsistent between nova and cinder

I've been trying to update our OpenStack installation to use new options enforce_new_defaults and enforce_scope since in Wallaby for nova old policies will be deprecated. Those option seem to be ...
0 votes
0 answers
94 views

Request time out for validating and showing information of the token

I could not understand what the difference of X-Auth-Token and X-Subject-Token is. I read in the documentation that "X-Auth-Token is a valid authentication token for an administrative user" ...
0 votes
1 answer
927 views

Could not recognize Fernet token in token authentication

I have username and password. I would like to authentication the token. First, I sent a request to password authentication api of keystone and I got an audit_id. Then, I send a request to token ...
0 votes
1 answer
34 views

Openstack: Are components related to a keystone::project auto garbage-collected upon project deletion?

Hello dear community, in the research of how to properly delete projects and their resources via the OpenStack API I was only able to find a hint in the official python sdk, the project_purge.py (...
0 votes
1 answer
6k views

Failed to discover available identity versions when contacting http://xxx.xxx.xxx.xxx:5000/v3

I've searched high and low for a resolution to this, and it seems that most people are having issues with the service not running at all or not being able to connect, which I am not having a problem ...
0 votes
2 answers
2k views

OpenStack Keystone | db_sync --check return exit code 1

Hy, I'm using Ansible OpenStack for deploy OpenStack test environment On playbook setup-openstack.yml task os_keystone : Check current state of Keystone DB fails because exit code 1 from /openstack/...
1 vote
1 answer
3k views

OpenStack Keystone port 5000 used by Python

I'm following official OpenStack documentation to build my first environment and got stuck in configuring Keystone (last step from http://docs.openstack.org/kilo/install-guide/install/apt/content/...
0 votes
1 answer
215 views

Migrating Devstack to subdomain cannot login to Horizon dashboard

I changed the Apache2 virtual host to put horizon on a subdomain so I can access it easier from abroad. I added the domain and subdomain to the local_settings.py for horizon and restarted horizon. I ...
1 vote
1 answer
403 views

Can't install openstack kilo, stuck on keystone installation

I'm following this guide to install a testing instance of OpenStack Kilo with a very basic environment in a VirtualBox machine running Ubuntu server 14.04 x64. I've managed to get to the point where ...
1 vote
1 answer
2k views

Openstack multiple nodes: separate Glance and Keystone machines

I followed the guide on hastexo to create an OpenStack Cloud. The Keystone service and the are supposed to run on separate machines. However, when I wanted to run glance-api in the console for ...
4 votes
1 answer
2k views

How does OpenStack Glance work with Keystone and what exactly are these configuration options for?

I am configuring Glance to authenticate against Keystone. It works but I am unsure exactly how some of the authentication options interact. I started with the configuring glance documentation, but ...
1 vote
0 answers
337 views

Openstack - Restrict user access to Regions Or Zones

We are going to upgrade our OpenStack by adding a bunch of new compute nodes. These nodes sole purpose is to host 'tiny' instances for users to run some small-scale experiments or to test stuff. Those ...
0 votes
1 answer
3k views

How to solve Failed to retrieve management_url from token issue in order to login to Openstack's Horizon?

Attempt Reading this Q&A did not solve the issue. /etc/keystone/keystone.conf provided if requested /etc/openstack-dashboard/local_settings provided if requested User A user has been ...