Keystone安装(Icehouse版)

节点规划
Controller：openstack1
Computer：openstack2、openstack3

openstack1
1.下载依赖包
1)yum -y install openstack-keystone
2)yum -y install python-keystoneclient
2.OpenStack配置
1)openstack-config --set /etc/keystone/keystone.conf database connection mysql://keystone:KEYSTONE_DBPASS@openstack1/keystone
3.MySQL配置
1)mysql -u root -p123456
mysql> CREATE DATABASE keystone;
mysql> GRANT ALL PRIVILEGES ON keystone.* TO ‘keystone’@‘localhost’ IDENTIFIED BY ‘KEYSTONE_DBPASS’;
mysql> GRANT ALL PRIVILEGES ON keystone.* TO ‘keystone’@’%’ IDENTIFIED BY ‘KEYSTONE_DBPASS’;
mysql> flush privileges;
mysql> exit;
4.身份认证服务创建(创建表)
1)su -s /bin/sh -c “keystone-manage db_sync” keystone
5.定义授权令牌
1)ADMIN_TOKEN=$(openssl rand -hex 10)
2)echo $ADMIN_TOKEN
3)openstack-config --set /etc/keystone/keystone.conf DEFAULT admin_token $ADMIN_TOKEN
6.创建签名密钥和证书
1)keystone-manage pki_setup --keystone-user keystone --keystone-group keystone
2)chown -R keystone:keystone /etc/keystone/ssl
3)chmod -R o-rwx /etc/keystone/ssl
7.开启keystone
1)service openstack-keystone restart
2)chkconfig openstack-keystone on
8.清除每个小时到期的令牌并记录
1)(crontab -l -u keystone 2>&1 | grep -q token_flush) ||
echo ‘@hourly /usr/bin/keystone-manage token_flush >/var/log/keystone/
keystone-tokenflush.log 2>&1’ >> /var/spool/cron/keystone

openstack2

openstack3