Questions tagged [openstack-keystone]
Openstack's identity service
17
questions with no upvoted or accepted answers
1
vote
1
answer
464
views
Limit user scope to a project in openstack
I have an openstack victoria cloud setup. I am using default policy of keystone and have not made any changes to that policy.
I have created a test user names testuser in openstack. I assigned it ...
1
vote
0
answers
41
views
Why don't identity providers have separate IDs and Names in Openstack?
I think most of the things have a separate ID and a separate Name in Openstack (Users, Projects, virtual machines, etc). Why don't identity providers have separate IDs and Names? Are there other ...
1
vote
0
answers
337
views
Openstack - Restrict user access to Regions Or Zones
We are going to upgrade our OpenStack by adding a bunch of new compute nodes. These nodes sole purpose is to host 'tiny' instances for users to run some small-scale experiments or to test stuff. Those ...
0
votes
0
answers
22
views
Openstack tokenless x509 auth
I would like to implement tokenless authorization according to:
tokenless_pike,
tokenless_v2023.
My goal is to obtain fernet token using x509 certificate. After configuration, according to the first ...
0
votes
0
answers
79
views
Openstack Keystone as a Service Provider, 401 - Unauthorized Exception for SSO
We're currently working on implementing SSO for our university's OpenStack environment using OpenStack Ansible (Yoga version). Our goal is to allow students to log in with their university credentials ...
0
votes
1
answer
177
views
Openstack instance launch with self signed certificate throwing nova api error
trying to build a test environment with openstack:antelope on three nodes; controller, compute and networking. everything seems to be set up fine except i use a self-signed certificate and when i ...
0
votes
0
answers
26
views
packstack openstack ussuri cannot use cli
I installed packstack openstack ussri on my virtual box without any issue (CLI and dashboard).
When I tried to install it on my company's environment, I can't use CLI commands. There was no error in ...
0
votes
0
answers
288
views
Getting " no such table: cell_mappings" error while installing nova
I was following the product documentation "https://docs.openstack.org/nova/2023.1/install/verify.html" after the nova installation is complete on my controller and compute node Iam seeing ...
0
votes
1
answer
740
views
OpenStack Queens: Horizon Fails after rebooting the controller node
The controller node was rebooted and some VMs were running. After that, when logging to Horizon, I keep receiving the following error: Error: Unable to retrieve instances. And I can no longer see the ...
0
votes
1
answer
718
views
Is there a way to access my OpenStack instance without floating IP?
It seems theoretically possible for me to ssh to my instance in OpenStack through credentials and instance id/network IP(Not floating IP) etc.
Is it possible, am I missing something? Is it simply a ...
0
votes
0
answers
3k
views
Openstack Wallaby: The Keystone service is temporarily unavailable
In a fresh openstack installation Nova refuses to work:
root@moscontrol:~# openstack hypervisor list
The server is currently unavailable. Please try again at a later time.<br /><br />
The ...
0
votes
0
answers
301
views
Requesting access token through OpenStack Keystone very slow
I have been trying to figure out why requesting an access token through OpenStack Keystone is relatively slow (lowest is about 400 ms to in some cases more than a second).
To get down to the cause I ...
0
votes
0
answers
35
views
Openstack authentication failure from python sdk-in jupyter notebook
I have been trying to make a simple connection to Openstack cloud using python-openstack sdk. With no success. Can someone tell me where I am going wrong? I can see that the header is sending ...
0
votes
1
answer
398
views
Openstack any member of a project can delete anything from the dashboard?
Just installed Openstack victoria. Was using a previous version. For some reason I am having a bit of trouble searching the web for this question.
To the point: users who have the "members" ...
0
votes
0
answers
1k
views
Keystone scopes behavior is inconsistent between nova and cinder
I've been trying to update our OpenStack installation to use new options enforce_new_defaults and enforce_scope since in Wallaby for nova old policies will be deprecated. Those option seem to be ...
0
votes
0
answers
94
views
Request time out for validating and showing information of the token
I could not understand what the difference of X-Auth-Token and X-Subject-Token is. I read in the documentation that "X-Auth-Token is a valid authentication token for an administrative user" ...
0
votes
1
answer
215
views
Migrating Devstack to subdomain cannot login to Horizon dashboard
I changed the Apache2 virtual host to put horizon on a subdomain so I can access it easier from abroad. I added the domain and subdomain to the local_settings.py for horizon and restarted horizon.
I ...