0

While creating a keystone service, I get an error This is not a recognized Fernet token 6518170426eb18bd6696 (HTTP 404) (Request ID: req-6efa9a54-a6ca-41d1-b137-a76280423f47)

Here are my detailed steps Сonfigure keystone:

crudini --set /etc/keystone/keystone.conf database connection mysql+pymysql://keystone:opensatck@localhost/keystone

crudini --set /etc/keystone/keystone.conf token provider fernet

su -s /bin/sh -c "keystone-manage db_sync" keystone

keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone

keystone-manage credential_setup --keystone-user keystone --keystone-group keystone

keystone-manage bootstrap --bootstrap-password openstack --bootstrap-admin-url http://controller:35357/v3/ --bootstrap-internal-url http://controller:35357/v3/ --bootstrap-public-url http://controller:5000/v3/ --bootstrap-region-id RegionOne

export ADM_TOKEN=$(openssl rand -hex 10)

crudini --set /etc/keystone/keystone.conf DEFAULT admin_token $ADM_TOKEN

source admin.rc

root@controller:~# openstack service create --name keystone --description "OpenStack Identity" identity

This is not a recognized Fernet token 6518170426eb18bd6696 (HTTP 404) (Request-ID: req-69212042-777e-4caa-b050-88f3990cdba0)

root@controller:~#

and my admin.rc file

  • export OS_AUTH_TYPE=token
  • export OS_USERNAME=admin
  • export OS_PASSWORD=openstack
  • export OS_TOKEN=6518170426eb18bd6696
  • export OS_AUTH_URL=http://controller:35357/v3
  • export OS_IDENTITY_API_VERSION=3
And
  • 5
  • 2
  • As far as I understand the `fernet_setup` already creates tokens within keystone for you, there's no need to create your own. Also, the keystone config references says about the `admin_token`:"# Using this feature is *NOT* recommended. Instead, use the `keystone-manage bootstrap` command. # bootstrap` command. – eblock Jan 23 '23 at 07:58

0 Answers0