5ec5081d51
Closes-bug: #1662486 Change-Id: I26d52b068389678ba918fbeff73e93c49a20e8bd
108 lines
2.0 KiB
ReStructuredText
108 lines
2.0 KiB
ReStructuredText
Memcached
|
|
~~~~~~~~~
|
|
|
|
The Identity service authentication mechanism for services uses Memcached
|
|
to cache tokens. The memcached service typically runs on the controller
|
|
node. For production deployments, we recommend enabling a combination of
|
|
firewalling, authentication, and encryption to secure it.
|
|
|
|
Install and configure components
|
|
--------------------------------
|
|
|
|
#. Install the packages:
|
|
|
|
.. only:: ubuntu or debian
|
|
|
|
.. code-block:: console
|
|
|
|
# apt install memcached python-memcache
|
|
|
|
.. end
|
|
|
|
.. endonly
|
|
|
|
.. only:: rdo
|
|
|
|
.. code-block:: console
|
|
|
|
# yum install memcached python-memcached
|
|
|
|
.. end
|
|
|
|
.. endonly
|
|
|
|
.. only:: obs
|
|
|
|
.. code-block:: console
|
|
|
|
# zypper install memcached python-python-memcached
|
|
|
|
.. end
|
|
|
|
.. endonly
|
|
|
|
.. only:: ubuntu or debian
|
|
|
|
2. Edit the ``/etc/memcached.conf`` file and configure the
|
|
service to use the management IP address of the controller node.
|
|
This is to enable access by other nodes via the management network:
|
|
|
|
.. code-block:: none
|
|
|
|
-l 10.0.0.11
|
|
|
|
.. end
|
|
|
|
.. note::
|
|
|
|
Change the existing line that had ``-l 127.0.0.1``.
|
|
|
|
.. endonly
|
|
|
|
.. only:: rdo
|
|
|
|
2. Edit the ``/etc/sysconfig/memcached`` file and configure the
|
|
service to use the management IP address of the controller node.
|
|
This is to enable access by other nodes via the management network:
|
|
|
|
.. code-block:: none
|
|
|
|
10.0.0.11
|
|
|
|
.. end
|
|
|
|
.. note::
|
|
|
|
Change the existing line from ``127.0.0.1``.
|
|
|
|
.. endonly
|
|
|
|
Finalize installation
|
|
---------------------
|
|
|
|
.. only:: ubuntu or debian
|
|
|
|
* Restart the Memcached service:
|
|
|
|
.. code-block:: console
|
|
|
|
# service memcached restart
|
|
|
|
.. end
|
|
|
|
.. endonly
|
|
|
|
.. only:: rdo or obs
|
|
|
|
* Start the Memcached service and configure it to start when the system
|
|
boots:
|
|
|
|
.. code-block:: console
|
|
|
|
# systemctl enable memcached.service
|
|
# systemctl start memcached.service
|
|
|
|
.. end
|
|
|
|
.. endonly
|