Stack Overflow
Stack Overflow

Questions tagged [keystone]

Keystone is the identity service used by OpenStack for authentication.

Essentially keystone's role is to grant tokens to users be they people, services, or anything at all.

If you make an API query anywhere in OpenStack, keystone's API is how it is discovered if you are allowed to make that API query.

247 questions
0
votes
1 answer

How to enable OS-KSADM Admin Extension in openstack?

I am new to openstack and I am working on tenant management in openstack icehouse though restful api, and realized I need to enable OS-KSADM extension. If I invoke my local openstack instance by the url: http://xx.x.x.x:5000/v2.0/extensions I…
bin wang
  • 1
  • 2
0
votes
1 answer

Keystone GET user email

Hello I have been trying to get my contact information using the REST API that Keystone has without success I'm using an unscoped token and i'm getting a 401 Unauthorized even with the admin user, and i'm authenticating against the port 5000 and…
Rodrigo Montano
  • 303
  • 5
  • 13
0
votes
1 answer

OpenStack IceHouse: dashboard authentication errors using multiple domains

I am presently prototyping an OpenStack setup (IceHouse RDO) using multiple domains to organize groups of users/projects (in the future, hopefully Juno, we would like to move to [domain-specific…
echapin
  • 43
  • 6
0
votes
1 answer

Keystone configuration file permissions

I'm playing around with Juju and OpenStack and I installed Keystone Identity service on one of the nodes. SSH-ing into the machine I noticed that the permissions of the configuration file /etc/keystone/keystone.conf are 644 (rw-r--r--) which means…
s3v3n
  • 8,203
  • 5
  • 42
  • 56
0
votes
1 answer

accessing swiftstack using keystone

I have been trying to use keystone to connect to swift. I want to create the endpoint using the command: keystone endpoint-create --region $REGION --service-id $SWIFT_SERVICE --publicurl "http://$SWIFT_IP/v1/KEY_\$(tenant_id)s" --adminurl…
budi
  • 1
  • 1
0
votes
0 answers

OpenStack -keyStone: Does it provide encrypted login?

Its there anyway I can supply encrypted password during logging in to OpenStack Keystone ? Does it have any tool for encryption ?
sandejai
  • 931
  • 1
  • 15
  • 22
0
votes
1 answer

How do I use external Javascript libraries in Keystone Js?

I'm currently building a node website using keystone js. On the pages of the website, I'm using javascript libraries, such as swiper, to render some of the visuals. However, it seems that keystone is not picking up the js libraries I've included.…
Mμ.
  • 8,382
  • 3
  • 26
  • 36
0
votes
1 answer

Getting list of Tenants from Open Stack using Keystone v2.0 Python API

I am new to Openstack. I am trying to get the list of tenants from OpenStack VM using the Keystone v2.0 python API. from keystoneclient.v2_0 import client as ksclient keystone_client = ksclient.Client(token='token',…
maisheri
  • 21
  • 4
0
votes
1 answer

Keystone configuration

For several days I've been struggling with configuring keystone. When I try to create a tenant for an administrative user and a tenant for other OpenStack services: $ keystone tenant-create --name=admin --description="Admin Tenant" $ keystone…
Ade
  • 5
  • 1
  • 2
  • 4
0
votes
1 answer

Difference between Global Role and Tenant Role in Openstack

I have noticed that the API documentation makes reference to Global Roles and Tenant Roles. e.g. The link http://developer.openstack.org/api-ref-identity-v2.html#identity-v2-ext has a Get operation on /v2.0/users/​{user_id}​/roles that says 'Lists…
Hoots
  • 1,876
  • 14
  • 23
0
votes
1 answer

Openstack Identity extension v2 API missing

We have installed openstack on Centos as per the procedures here... http://docs.openstack.org/icehouse/install-guide/install/yum/content/index.html I've been trying to access the administrative end points to list users (and then add users and…
Hoots
  • 1,876
  • 14
  • 23
0
votes
1 answer

Openstack.Net SDK cannot access service with region

Using our own hardware, we've installed vanilla openstack with all components however I am having problems accessing services other than the Identity due to a region issue. The code used is as follows called with the admin account and admin tennant…
Hoots
  • 1,876
  • 14
  • 23
0
votes
1 answer

Openstack Keystone 3.0 API

I currently have an Openstack Havana cluster that is running the 2.0 API. I am having some issues integrating my Keystone with my corporate read only LDAP. I have done the LDAP/SQL split (for identity and assignment) as recommended. When I run the…
user3755648
  • 71
  • 4
0
votes
1 answer

The authentication token issued by the Identity service has expired in keystone (Openstack icehouse)

I deployed openstack using MAAS-Juju(juju charms). After I tried to login into the openstack horizon I face the following issue.The authentication token issued by the Identity service has expired in keystone (Openstack icehouse)please help.
user3690864
  • 3
  • 1
0
votes
1 answer

can't conenct to local mysql server through socket

I'm working on setting up openstack's keystone service, and I'm using cloudsql to do it from compute engine. When I created the connection, I used this as my connections string: sudo openstack-config --set /etc/keystone/keystone.conf \ database…
user2666240
1 2 3
…
16 17