Questions tagged [openstack-keystone]
Openstack's identity service
28
questions
0
votes
0
answers
21
views
Openstack tokenless x509 auth
I would like to implement tokenless authorization according to:
tokenless_pike,
tokenless_v2023.
My goal is to obtain fernet token using x509 certificate. After configuration, according to the first ...
0
votes
0
answers
78
views
Openstack Keystone as a Service Provider, 401 - Unauthorized Exception for SSO
We're currently working on implementing SSO for our university's OpenStack environment using OpenStack Ansible (Yoga version). Our goal is to allow students to log in with their university credentials ...
0
votes
1
answer
177
views
Openstack instance launch with self signed certificate throwing nova api error
trying to build a test environment with openstack:antelope on three nodes; controller, compute and networking. everything seems to be set up fine except i use a self-signed certificate and when i ...
0
votes
0
answers
26
views
packstack openstack ussuri cannot use cli
I installed packstack openstack ussri on my virtual box without any issue (CLI and dashboard).
When I tried to install it on my company's environment, I can't use CLI commands. There was no error in ...
0
votes
0
answers
288
views
Getting " no such table: cell_mappings" error while installing nova
I was following the product documentation "https://docs.openstack.org/nova/2023.1/install/verify.html" after the nova installation is complete on my controller and compute node Iam seeing ...
1
vote
1
answer
464
views
Limit user scope to a project in openstack
I have an openstack victoria cloud setup. I am using default policy of keystone and have not made any changes to that policy.
I have created a test user names testuser in openstack. I assigned it ...
0
votes
1
answer
739
views
OpenStack Queens: Horizon Fails after rebooting the controller node
The controller node was rebooted and some VMs were running. After that, when logging to Horizon, I keep receiving the following error: Error: Unable to retrieve instances. And I can no longer see the ...
0
votes
1
answer
717
views
Is there a way to access my OpenStack instance without floating IP?
It seems theoretically possible for me to ssh to my instance in OpenStack through credentials and instance id/network IP(Not floating IP) etc.
Is it possible, am I missing something? Is it simply a ...
0
votes
0
answers
3k
views
Openstack Wallaby: The Keystone service is temporarily unavailable
In a fresh openstack installation Nova refuses to work:
root@moscontrol:~# openstack hypervisor list
The server is currently unavailable. Please try again at a later time.<br /><br />
The ...
0
votes
0
answers
301
views
Requesting access token through OpenStack Keystone very slow
I have been trying to figure out why requesting an access token through OpenStack Keystone is relatively slow (lowest is about 400 ms to in some cases more than a second).
To get down to the cause I ...
-1
votes
1
answer
1k
views
How can I authenticate through application credentials to OpenStack using the CLI?
I know how to authenticate through user credentials and token to OpenStack via the openstack CLI. Now I would like to know how to use application credentials to authenticate.
Using ...
1
vote
0
answers
41
views
Why don't identity providers have separate IDs and Names in Openstack?
I think most of the things have a separate ID and a separate Name in Openstack (Users, Projects, virtual machines, etc). Why don't identity providers have separate IDs and Names? Are there other ...
0
votes
1
answer
75
views
containerized Openstack services
I have a difficulties in the following question:
"Does it make sense to containerized/dockerize the openstack controlling services like Neurtron/Cinder/Glance/Keystone server services (neutron-...
0
votes
0
answers
35
views
Openstack authentication failure from python sdk-in jupyter notebook
I have been trying to make a simple connection to Openstack cloud using python-openstack sdk. With no success. Can someone tell me where I am going wrong? I can see that the header is sending ...
0
votes
1
answer
398
views
Openstack any member of a project can delete anything from the dashboard?
Just installed Openstack victoria. Was using a previous version. For some reason I am having a bit of trouble searching the web for this question.
To the point: users who have the "members" ...
0
votes
0
answers
1k
views
Keystone scopes behavior is inconsistent between nova and cinder
I've been trying to update our OpenStack installation to use new options enforce_new_defaults and enforce_scope since in Wallaby for nova old policies will be deprecated. Those option seem to be ...
0
votes
0
answers
94
views
Request time out for validating and showing information of the token
I could not understand what the difference of X-Auth-Token and X-Subject-Token is. I read in the documentation that "X-Auth-Token is a valid authentication token for an administrative user" ...
0
votes
1
answer
927
views
Could not recognize Fernet token in token authentication
I have username and password. I would like to authentication the token. First, I sent a request to password authentication api of keystone and I got an audit_id. Then, I send a request to token ...
0
votes
1
answer
34
views
Openstack: Are components related to a keystone::project auto garbage-collected upon project deletion?
Hello dear community,
in the research of how to properly delete projects and their resources via the OpenStack API I was only able to find a hint in the official python sdk, the project_purge.py (...
0
votes
1
answer
6k
views
Failed to discover available identity versions when contacting http://xxx.xxx.xxx.xxx:5000/v3
I've searched high and low for a resolution to this, and it seems that most people are having issues with the service not running at all or not being able to connect, which I am not having a problem ...
0
votes
2
answers
2k
views
OpenStack Keystone | db_sync --check return exit code 1
Hy,
I'm using Ansible OpenStack for deploy OpenStack test environment
On playbook setup-openstack.yml task os_keystone : Check current state of Keystone DB fails because exit code 1 from /openstack/...
1
vote
1
answer
3k
views
OpenStack Keystone port 5000 used by Python
I'm following official OpenStack documentation to build my first environment and got stuck in configuring Keystone (last step from http://docs.openstack.org/kilo/install-guide/install/apt/content/...
0
votes
1
answer
215
views
Migrating Devstack to subdomain cannot login to Horizon dashboard
I changed the Apache2 virtual host to put horizon on a subdomain so I can access it easier from abroad. I added the domain and subdomain to the local_settings.py for horizon and restarted horizon.
I ...
1
vote
1
answer
403
views
Can't install openstack kilo, stuck on keystone installation
I'm following this guide to install a testing instance of OpenStack Kilo with a very basic environment in a VirtualBox machine running Ubuntu server 14.04 x64. I've managed to get to the point where ...
1
vote
1
answer
2k
views
Openstack multiple nodes: separate Glance and Keystone machines
I followed the guide on hastexo to create an OpenStack Cloud. The Keystone service and the are supposed to run on separate machines. However, when I wanted to run
glance-api in the console for ...
4
votes
1
answer
2k
views
How does OpenStack Glance work with Keystone and what exactly are these configuration options for?
I am configuring Glance to authenticate against Keystone. It works
but I am unsure exactly how some of the authentication options
interact.
I started with the configuring glance documentation, but ...
1
vote
0
answers
337
views
Openstack - Restrict user access to Regions Or Zones
We are going to upgrade our OpenStack by adding a bunch of new compute nodes. These nodes sole purpose is to host 'tiny' instances for users to run some small-scale experiments or to test stuff. Those ...
0
votes
1
answer
3k
views
How to solve Failed to retrieve management_url from token issue in order to login to Openstack's Horizon?
Attempt
Reading this Q&A did not solve the issue.
/etc/keystone/keystone.conf
provided if requested
/etc/openstack-dashboard/local_settings
provided if requested
User
A user has been ...