c7bfdbb44f
Provide a script for interpreting the "only" directives and splitting the existing content up into standalone files for each OS to make it easier for project teams to copy the parts they need into their own project documentation trees without requiring separate platform builds. The files have been hand-edited to pass the niceness check and to allow the install guide to build. The script for building the guide has been changed to not build separate copies per OS. Change-Id: Ib88f373190e2a4fbf14186418852d971b33dca85 Signed-off-by: Doug Hellmann <doug@doughellmann.com>
84 lines
3.2 KiB
ReStructuredText
84 lines
3.2 KiB
ReStructuredText
Verify operation
|
|
~~~~~~~~~~~~~~~~
|
|
|
|
Verify operation of the Identity service before installing other
|
|
services.
|
|
|
|
.. note::
|
|
|
|
Perform these commands on the controller node.
|
|
|
|
|
|
#. For security reasons, disable the temporary authentication
|
|
token mechanism:
|
|
|
|
Edit the ``/etc/keystone/keystone-paste.ini``
|
|
file and remove ``admin_token_auth`` from the
|
|
``[pipeline:public_api]``, ``[pipeline:admin_api]``,
|
|
and ``[pipeline:api_v3]`` sections.
|
|
|
|
|
|
|
|
2. Unset the temporary ``OS_AUTH_URL`` and ``OS_PASSWORD``
|
|
environment variable:
|
|
|
|
.. code-block:: console
|
|
|
|
$ unset OS_AUTH_URL OS_PASSWORD
|
|
|
|
.. end
|
|
|
|
3. As the ``admin`` user, request an authentication token:
|
|
|
|
.. code-block:: console
|
|
|
|
$ openstack --os-auth-url http://controller:35357/v3 \
|
|
--os-project-domain-name Default --os-user-domain-name Default \
|
|
--os-project-name admin --os-username admin token issue
|
|
|
|
Password:
|
|
+------------+-----------------------------------------------------------------+
|
|
| Field | Value |
|
|
+------------+-----------------------------------------------------------------+
|
|
| expires | 2016-02-12T20:14:07.056119Z |
|
|
| id | gAAAAABWvi7_B8kKQD9wdXac8MoZiQldmjEO643d-e_j-XXq9AmIegIbA7UHGPv |
|
|
| | atnN21qtOMjCFWX7BReJEQnVOAj3nclRQgAYRsfSU_MrsuWb4EDtnjU7HEpoBb4 |
|
|
| | o6ozsA_NmFWEpLeKy0uNn_WeKbAhYygrsmQGA49dclHVnz-OMVLiyM9ws |
|
|
| project_id | 343d245e850143a096806dfaefa9afdc |
|
|
| user_id | ac3377633149401296f6c0d92d79dc16 |
|
|
+------------+-----------------------------------------------------------------+
|
|
|
|
.. end
|
|
|
|
.. note::
|
|
|
|
This command uses the password for the ``admin`` user.
|
|
|
|
4. As the ``demo`` user, request an authentication token:
|
|
|
|
.. code-block:: console
|
|
|
|
$ openstack --os-auth-url http://controller:5000/v3 \
|
|
--os-project-domain-name Default --os-user-domain-name Default \
|
|
--os-project-name demo --os-username demo token issue
|
|
|
|
Password:
|
|
+------------+-----------------------------------------------------------------+
|
|
| Field | Value |
|
|
+------------+-----------------------------------------------------------------+
|
|
| expires | 2016-02-12T20:15:39.014479Z |
|
|
| id | gAAAAABWvi9bsh7vkiby5BpCCnc-JkbGhm9wH3fabS_cY7uabOubesi-Me6IGWW |
|
|
| | yQqNegDDZ5jw7grI26vvgy1J5nCVwZ_zFRqPiz_qhbq29mgbQLglbkq6FQvzBRQ |
|
|
| | JcOzq3uwhzNxszJWmzGC7rJE_H0A_a3UFhqv8M4zMRYSbS2YF0MyFmp_U |
|
|
| project_id | ed0b60bf607743088218b0a533d5943f |
|
|
| user_id | 58126687cbcc4888bfa9ab73a2256f27 |
|
|
+------------+-----------------------------------------------------------------+
|
|
|
|
.. end
|
|
|
|
.. note::
|
|
|
|
This command uses the password for the ``demo``
|
|
user and API port 5000 which only allows regular (non-admin)
|
|
access to the Identity service API.
|