Questions tagged [openstack-keystone]

Openstack's identity service

17 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
1 vote
1 answer
464 views

Limit user scope to a project in openstack

I have an openstack victoria cloud setup. I am using default policy of keystone and have not made any changes to that policy. I have created a test user names testuser in openstack. I assigned it ...
Shalabh Goel's user avatar
1 vote
0 answers
41 views

Why don't identity providers have separate IDs and Names in Openstack?

I think most of the things have a separate ID and a separate Name in Openstack (Users, Projects, virtual machines, etc). Why don't identity providers have separate IDs and Names? Are there other ...
Zoli's user avatar
  • 11
1 vote
0 answers
337 views

Openstack - Restrict user access to Regions Or Zones

We are going to upgrade our OpenStack by adding a bunch of new compute nodes. These nodes sole purpose is to host 'tiny' instances for users to run some small-scale experiments or to test stuff. Those ...
Athafoud's user avatar
  • 149
0 votes
0 answers
22 views

Openstack tokenless x509 auth

I would like to implement tokenless authorization according to: tokenless_pike, tokenless_v2023. My goal is to obtain fernet token using x509 certificate. After configuration, according to the first ...
vaxin's user avatar
  • 1
0 votes
0 answers
79 views

Openstack Keystone as a Service Provider, 401 - Unauthorized Exception for SSO

We're currently working on implementing SSO for our university's OpenStack environment using OpenStack Ansible (Yoga version). Our goal is to allow students to log in with their university credentials ...
Joel 35's user avatar
0 votes
1 answer
177 views

Openstack instance launch with self signed certificate throwing nova api error

trying to build a test environment with openstack:antelope on three nodes; controller, compute and networking. everything seems to be set up fine except i use a self-signed certificate and when i ...
aclaverie's user avatar
0 votes
0 answers
26 views

packstack openstack ussuri cannot use cli

I installed packstack openstack ussri on my virtual box without any issue (CLI and dashboard). When I tried to install it on my company's environment, I can't use CLI commands. There was no error in ...
rad's user avatar
  • 1
0 votes
0 answers
288 views

Getting " no such table: cell_mappings" error while installing nova

I was following the product documentation "https://docs.openstack.org/nova/2023.1/install/verify.html" after the nova installation is complete on my controller and compute node Iam seeing ...
hgi2000's user avatar
0 votes
1 answer
740 views

OpenStack Queens: Horizon Fails after rebooting the controller node

The controller node was rebooted and some VMs were running. After that, when logging to Horizon, I keep receiving the following error: Error: Unable to retrieve instances. And I can no longer see the ...
Ramy Fouad's user avatar
0 votes
1 answer
718 views

Is there a way to access my OpenStack instance without floating IP?

It seems theoretically possible for me to ssh to my instance in OpenStack through credentials and instance id/network IP(Not floating IP) etc. Is it possible, am I missing something? Is it simply a ...
Vishwa Mithra Tatta's user avatar
0 votes
0 answers
3k views

Openstack Wallaby: The Keystone service is temporarily unavailable

In a fresh openstack installation Nova refuses to work: root@moscontrol:~# openstack hypervisor list The server is currently unavailable. Please try again at a later time.<br /><br /> The ...
user495431's user avatar
0 votes
0 answers
301 views

Requesting access token through OpenStack Keystone very slow

I have been trying to figure out why requesting an access token through OpenStack Keystone is relatively slow (lowest is about 400 ms to in some cases more than a second). To get down to the cause I ...
Marlinc's user avatar
  • 101
0 votes
0 answers
35 views

Openstack authentication failure from python sdk-in jupyter notebook

I have been trying to make a simple connection to Openstack cloud using python-openstack sdk. With no success. Can someone tell me where I am going wrong? I can see that the header is sending ...
Vishwa Mithra Tatta's user avatar
0 votes
1 answer
398 views

Openstack any member of a project can delete anything from the dashboard?

Just installed Openstack victoria. Was using a previous version. For some reason I am having a bit of trouble searching the web for this question. To the point: users who have the "members" ...
number9's user avatar
  • 263
0 votes
0 answers
1k views

Keystone scopes behavior is inconsistent between nova and cinder

I've been trying to update our OpenStack installation to use new options enforce_new_defaults and enforce_scope since in Wallaby for nova old policies will be deprecated. Those option seem to be ...
Igor Raits's user avatar
0 votes
0 answers
94 views

Request time out for validating and showing information of the token

I could not understand what the difference of X-Auth-Token and X-Subject-Token is. I read in the documentation that "X-Auth-Token is a valid authentication token for an administrative user" ...
Bani's user avatar
  • 19
0 votes
1 answer
215 views

Migrating Devstack to subdomain cannot login to Horizon dashboard

I changed the Apache2 virtual host to put horizon on a subdomain so I can access it easier from abroad. I added the domain and subdomain to the local_settings.py for horizon and restarted horizon. I ...
Lance's user avatar
  • 1