- Fix the incorrect environment variable. 'OS_URL' should be 'OS_AUTH_URL'. - Add another should be unset environment variable. And it will not require you input password after running the command until you unset the 'OS_PASSWORD'. Change-Id: Ice02b301e03c06da9fdb26b3bfcb3fd4d8be1fcb Closes-Bug: #1632992
3.5 KiB
Verify operation
Verify operation of the Identity service before installing other services.
Note
Perform these commands on the controller node.
obs or ubuntu
For security reasons, disable the temporary authentication token mechanism:
Edit the
/etc/keystone/keystone-paste.ini
file and removeadmin_token_auth
from the[pipeline:public_api]
,[pipeline:admin_api]
, and[pipeline:api_v3]
sections.
rdo
For security reasons, disable the temporary authentication token mechanism:
Edit the
/etc/keystone/keystone-paste.ini
file and removeadmin_token_auth
from the[pipeline:public_api]
,[pipeline:admin_api]
, and[pipeline:api_v3]
sections.
Unset the temporary
OS_AUTH_URL
andOS_PASSWORD
environment variable:$ unset OS_AUTH_URL OS_PASSWORD
As the
admin
user, request an authentication token:$ openstack --os-auth-url http://controller:35357/v3 \ --os-project-domain-name default --os-user-domain-name default \ --os-project-name admin --os-username admin token issue Password: +------------+-----------------------------------------------------------------+ | Field | Value | +------------+-----------------------------------------------------------------+ | expires | 2016-02-12T20:14:07.056119Z | | id | gAAAAABWvi7_B8kKQD9wdXac8MoZiQldmjEO643d-e_j-XXq9AmIegIbA7UHGPv | | | atnN21qtOMjCFWX7BReJEQnVOAj3nclRQgAYRsfSU_MrsuWb4EDtnjU7HEpoBb4 | | | o6ozsA_NmFWEpLeKy0uNn_WeKbAhYygrsmQGA49dclHVnz-OMVLiyM9ws | | project_id | 343d245e850143a096806dfaefa9afdc | | user_id | ac3377633149401296f6c0d92d79dc16 | +------------+-----------------------------------------------------------------+
Note
This command uses the password for the
admin
user.As the
demo
user, request an authentication token:$ openstack --os-auth-url http://controller:5000/v3 \ --os-project-domain-name default --os-user-domain-name default \ --os-project-name demo --os-username demo token issue Password: +------------+-----------------------------------------------------------------+ | Field | Value | +------------+-----------------------------------------------------------------+ | expires | 2016-02-12T20:15:39.014479Z | | id | gAAAAABWvi9bsh7vkiby5BpCCnc-JkbGhm9wH3fabS_cY7uabOubesi-Me6IGWW | | | yQqNegDDZ5jw7grI26vvgy1J5nCVwZ_zFRqPiz_qhbq29mgbQLglbkq6FQvzBRQ | | | JcOzq3uwhzNxszJWmzGC7rJE_H0A_a3UFhqv8M4zMRYSbS2YF0MyFmp_U | | project_id | ed0b60bf607743088218b0a533d5943f | | user_id | 58126687cbcc4888bfa9ab73a2256f27 | +------------+-----------------------------------------------------------------+
Note
This command uses the password for the
demo
user and API port 5000 which only allows regular (non-admin) access to the Identity service API.