3e253bf251
All services have now moved to the syntax: [database] connection = mysql://.... This patch updates them to ensure the right configuration method is used. Change-Id: I838c96710114336f8d58fbe42a8f508c8b01fb18
115 lines
3.8 KiB
XML
115 lines
3.8 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<section xmlns="http://docbook.org/ns/docbook"
|
|
xmlns:xi="http://www.w3.org/2001/XInclude"
|
|
xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0"
|
|
xml:id="keystone-configuration-file">
|
|
<title>Identity Service configuration files</title>
|
|
<variablelist>
|
|
<varlistentry>
|
|
<term>keystone.conf</term>
|
|
<listitem>
|
|
<para>The Identity Service
|
|
<filename>/etc/keystone/keystone.conf</filename>
|
|
configuration file is an INI-format file with
|
|
sections.</para>
|
|
<para>The <literal>[DEFAULT]</literal> section configures
|
|
general configuration values.</para>
|
|
<para>Specific sections, such as the <literal>[database]</literal>
|
|
and <literal>[ec2]</literal> sections, configure individual
|
|
services.</para>
|
|
<table rules="all">
|
|
<caption>keystone.conf file sections</caption>
|
|
<col width="30%"/>
|
|
<col width="70%"/>
|
|
<thead>
|
|
<tr>
|
|
<td>Section</td>
|
|
<td>Description</td>
|
|
</tr>
|
|
</thead>
|
|
<tbody>
|
|
<tr>
|
|
<td><literal>[DEFAULT]</literal></td>
|
|
<td>General configuration.</td>
|
|
</tr>
|
|
<tr>
|
|
<td><literal>[database]</literal></td>
|
|
<td>Optional storage back-end configuration.</td>
|
|
</tr>
|
|
<tr>
|
|
<td><literal>[ec2]</literal></td>
|
|
<td>Amazon EC2 authentication driver configuration.</td>
|
|
</tr>
|
|
<tr>
|
|
<td><literal>[s3]</literal></td>
|
|
<td>Amazon S3 authentication driver configuration.</td>
|
|
</tr>
|
|
<tr>
|
|
<td><literal>[identity]</literal></td>
|
|
<td>Identity Service system driver configuration.</td>
|
|
</tr>
|
|
<tr>
|
|
<td><literal>[catalog]</literal></td>
|
|
<td>Service catalog driver configuration.</td>
|
|
</tr>
|
|
<tr>
|
|
<td><literal>[token]</literal></td>
|
|
<td>Token driver configuration.</td>
|
|
</tr>
|
|
<tr>
|
|
<td><literal>[policy]</literal></td>
|
|
<td>Policy system driver configuration for RBAC.</td>
|
|
</tr>
|
|
<tr>
|
|
<td><literal>[signing]</literal></td>
|
|
<td>Cryptographic signatures for PKI based tokens.</td>
|
|
</tr>
|
|
<tr>
|
|
<td><literal>[ssl]</literal></td>
|
|
<td>SSL configuration.</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
<para>When you start the Identity Service, you can use the
|
|
<parameter>--config-file</parameter> parameter to specify
|
|
a configuration file.</para>
|
|
<para>If you do not specify a configuration file, the Identity
|
|
Service looks for the <filename>keystone.conf</filename>
|
|
configuration file in these directories in this
|
|
order:</para>
|
|
<orderedlist>
|
|
<listitem>
|
|
<para>
|
|
<literal>~/.keystone</literal>
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
<literal>~/</literal>
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
<literal>/etc/keystone</literal>
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
<literal>/etc</literal>
|
|
</para>
|
|
</listitem>
|
|
</orderedlist>
|
|
</listitem>
|
|
</varlistentry>
|
|
<varlistentry>
|
|
<term>keystone-paste.ini</term>
|
|
<listitem>
|
|
<para>The
|
|
<filename>/etc/keystone/keystone-paste.ini</filename> file
|
|
configures the Identity Service WSGI middleware
|
|
pipeline.</para>
|
|
</listitem>
|
|
</varlistentry>
|
|
</variablelist>
|
|
</section>
|