openstack
/
openstack-manuals
Code Issues Proposed changes

[install] Fix heat trustee configuration 

The current example config is broken with the default deferred
authentication of trusts - the project_domain_id and project_name
cannot be specified in this section or keystone will throw a
"cannot be scoped to multiple targets" error when we attempt to get
a token scoped to a trust.

Also, the auth_uri is unused by the keystoneclient password auth
plugins, so remove it (it has been a source of confusion in the
referenced bug).

Change-Id: I6305be3c693993de4d16d82fd6de936e92c437c5
Closes-Bug: #1300246
Backport: liberty
(cherry picked from commit 98ef59a599)
This commit is contained in:
Steven Hardy 2015-12-07 17:33:42 +00:00 committed by Sampath Priyankara
parent 2ecaebe211
commit 5a3618d4f5
1 changed files with 2 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
doc/install-guide/source/heat-install.rst
View File

@ -400,14 +400,11 @@ Install and configure components
[trustee]
...
auth_uri = http://controller:5000
auth_url = http://controller:35357
auth_plugin = password
project_domain_id = default
user_domain_id = default
project_name = service
auth_url = http://controller:35357
username = heat
password = HEAT_PASS
user_domain_id = default
[clients_keystone]
...