[iyunv@linux-node1 keystone]# telnet 127.0.0.1 11211
Trying 127.0.0.1...
Connected to 127.0.0.1.
Escape character is '^]'.
^]
telnet> quit
Connection closed.
[iyunv@linux-node1 keystone]#
为了防止后期一些服务监听再IPv6上的干扰，可以禁用掉系统默认的IPv6
[iyunv@linux-node1 ~]# vim /etc/sysctl.conf
[iyunv@linux-node1 ~]# cat /etc/sysctl.conf
# sysctl settings are defined through files in
# /usr/lib/sysctl.d/, /run/sysctl.d/, and /etc/sysctl.d/.
#
# Vendors settings live in /usr/lib/sysctl.d/.
# To override a whole file, create a new file with the same in
# /etc/sysctl.d/ and put new settings there. To override
# only specific settings, add a file with a lexically later
# name in /etc/sysctl.d/ and put new settings there.
#
# For more information, see sysctl.conf(5) and sysctl.d(5).
net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1
[iyunv@linux-node1 ~]# sysctl -p
net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1
[iyunv@linux-node1 ~]#
[iyunv@linux-node1 ~]# tail -f /var/log/keystone/keystone.log
2017-02-17 17:22:11.743 7983 INFO migrate.versioning.api [-] done
2017-02-17 17:22:11.743 7983 INFO migrate.versioning.api [-] 96 -> 97...
2017-02-17 17:22:11.754 7983 INFO migrate.versioning.api [-] done
2017-02-17 17:28:10.672 8128 INFO keystone.token.providers.fernet.utils [-] [fernet_tokens] key_repository does not appear to exist; attempting to create it
2017-02-17 17:28:10.673 8128 INFO keystone.token.providers.fernet.utils [-] Created a new key: /etc/keystone/fernet-keys/0
2017-02-17 17:28:10.674 8128 INFO keystone.token.providers.fernet.utils [-] Starting key rotation with 1 key files: ['/etc/keystone/fernet-keys/0']
2017-02-17 17:28:10.675 8128 INFO keystone.token.providers.fernet.utils [-] Current primary key is: 0
2017-02-17 17:28:10.675 8128 INFO keystone.token.providers.fernet.utils [-] Next primary key will be: 1
2017-02-17 17:28:10.675 8128 INFO keystone.token.providers.fernet.utils [-] Promoted key 0 to be the primary: 1
2017-02-17 17:28:10.676 8128 INFO keystone.token.providers.fernet.utils [-] Created a new key: /etc/keystone/fernet-keys/0
[iyunv@linux-node1 keystone]# openstack user create --domain default --password-prompt demo
User Password:
Repeat User Password:
+-----------+----------------------------------+
| Field | Value |
+-----------+----------------------------------+
| domain_id | 1b7cf039119d4f8a8e82baaa6f4c2469 |
| enabled | True |
| id | 7a01e2bd239844f183abbb4b0b960647 |
| name | demo |
+-----------+----------------------------------+
[iyunv@linux-node1 keystone]#
9、创建 user 角色
[iyunv@linux-node1 keystone]# openstack role create user
+-----------+----------------------------------+
| Field | Value |
+-----------+----------------------------------+
| domain_id | None |
| id | 5fdf92e7547b4f9aa346f88942ce36b0 |
| name | user |
+-----------+----------------------------------+
[iyunv@linux-node1 keystone]#
10、添加 user角色到 demo 项目和用户
[iyunv@linux-node1 keystone]# openstack role add --project demo --user demo user
[iyunv@linux-node1 keystone]#
[iyunv@linux-node1 keystone]# openstack project create --domain default --description "Service Project" service
+-------------+----------------------------------+
| Field | Value |
+-------------+----------------------------------+
| description | Service Project |
| domain_id | 1b7cf039119d4f8a8e82baaa6f4c2469 |
| enabled | True |
| id | fc29ee0a1c7145de99885bb4a3bef9c1 |
| is_domain | False |
| name | service |
| parent_id | 1b7cf039119d4f8a8e82baaa6f4c2469 |
+-------------+----------------------------------+
[iyunv@linux-node1 keystone]#
提前为每个服务创建用户，密码都是和本服务用户名一致 2、创建glance用户
[iyunv@linux-node1 ~]# openstack user create --domain default --password-prompt glance
User Password:
Repeat User Password:
+-----------+----------------------------------+
| Field | Value |
+-----------+----------------------------------+
| domain_id | 1b7cf039119d4f8a8e82baaa6f4c2469 |
| enabled | True |
| id | fc2b7770e8394568922b0ef18672b45c |
| name | glance |
+-----------+----------------------------------+
[iyunv@linux-node1 ~]#
3、把glance用户加入到service项目，同时给它admin角色
root@linux-node1 ~]# openstack role add --project service --user glance admin
[iyunv@linux-node1 ~]#
nova服务
4、创建nova用户，并加入service项目，同时给它admin角色
[iyunv@linux-node1 ~]# openstack user create --domain default --password-prompt nova
User Password:
Repeat User Password:
+-----------+----------------------------------+
| Field | Value |
+-----------+----------------------------------+
| domain_id | 1b7cf039119d4f8a8e82baaa6f4c2469 |
| enabled | True |
| id | b14137c43aa9474d86331593db43fe1f |
| name | nova |
+-----------+----------------------------------+
[iyunv@linux-node1 ~]# openstack role add --project service --user nova admin
[iyunv@linux-node1 ~]#
5、创建neutron用户，并接入Service项目，同时给它admin角色
[iyunv@linux-node1 ~]# openstack user create --domain default --password-prompt neutron
User Password:
Repeat User Password:
+-----------+----------------------------------+
| Field | Value |
+-----------+----------------------------------+
| domain_id | 1b7cf039119d4f8a8e82baaa6f4c2469 |
| enabled | True |
| id | ff1bea210abb4d89b27ab96fd6d6b2d9 |
| name | neutron |
+-----------+----------------------------------+
[iyunv@linux-node1 ~]# openstack role add --project service --user neutron admin
[iyunv@linux-node1 ~]#
[iyunv@linux-node1 ~]# openstack user --help
Command "user" matches:
user create
user delete
user list
user password set
user set
user show
[iyunv@linux-node1 ~]# openstack endpoint --help
Command "endpoint" matches:
endpoint create
endpoint delete
endpoint list
endpoint set
endpoint show
[iyunv@linux-node1 ~]#
8、 检查上面创建结果
[iyunv@linux-node1 ~]# openstack service list
+----------------------------------+----------+----------+
| ID | Name | Type |
+----------------------------------+----------+----------+
| 4c0cdee367d14a66aa3921fe68e4b63e | keystone | identity |
+----------------------------------+----------+----------+
[iyunv@linux-node1 ~]# openstack endpoint list
+--------------------+-----------+--------------+--------------+---------+-----------+--------------------+
| ID | Region | Service Name | Service Type | Enabled | Interface | URL |
+--------------------+-----------+--------------+--------------+---------+-----------+--------------------+
| 1d91a71ed4254789ad | RegionOne | keystone | identity | True | public | http://192.168.56. |
| 3c6fed96ec6375 | | | | | | 11:5000/v3 |
| 525ca6f2b5bc426d82 | RegionOne | keystone | identity | True | internal | http://192.168.56. |
| 410f551d3568ff | | | | | | 11:5000/v3 |
| 7b561693fd7947a0b6 | RegionOne | keystone | identity | True | admin | http://192.168.56. |
| c05e6f8f42d964 | | | | | | 11:35357/v3 |
+--------------------+-----------+--------------+--------------+---------+-----------+--------------------+
[iyunv@linux-node1 ~]#
其实上面创建操作都是写数据库，查询操作也是查询数据库
[iyunv@linux-node1 ~]# mysql -ukeystone -pkeystone
Welcome to the MariaDB monitor. Commands end with ; or \g.
Your MariaDB connection id is 8
Server version: 5.5.52-MariaDB MariaDB Server
Copyright (c) 2000, 2016, Oracle, MariaDB Corporation Ab and others.
Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
MariaDB [(none)]> select * from keystone.endpoint;
+----------------------------------+--------------------+-----------+----------------------------------+-------------------------------+-------+---------+-----------+
| id | legacy_endpoint_id | interface | service_id | url | extra | enabled | region_id |
+----------------------------------+--------------------+-----------+----------------------------------+-------------------------------+-------+---------+-----------+
| 1d91a71ed4254789ad3c6fed96ec6375 | NULL | public | 4c0cdee367d14a66aa3921fe68e4b63e | http://192.168.56.11:5000/v3 | {} | 1 | RegionOne |
| 525ca6f2b5bc426d82410f551d3568ff | NULL | internal | 4c0cdee367d14a66aa3921fe68e4b63e | http://192.168.56.11:5000/v3 | {} | 1 | RegionOne |
| 7b561693fd7947a0b6c05e6f8f42d964 | NULL | admin | 4c0cdee367d14a66aa3921fe68e4b63e | http://192.168.56.11:35357/v3 | {} | 1 | RegionOne |
+----------------------------------+--------------------+-----------+----------------------------------+-------------------------------+-------+---------+-----------+
3 rows in set (0.00 sec)
MariaDB [(none)]>
全部都在数据库里存着的
MariaDB [(none)]> select * from keystone.user;
+----------------------------------+-------+---------+--------------------+
| id | extra | enabled | default_project_id |
+----------------------------------+-------+---------+--------------------+
| 7a01e2bd239844f183abbb4b0b960647 | {} | 1 | NULL |
| b14137c43aa9474d86331593db43fe1f | {} | 1 | NULL |
| bf3591b757704f8c8166e3294a62efb7 | {} | 1 | NULL |
| fc2b7770e8394568922b0ef18672b45c | {} | 1 | NULL |
| ff1bea210abb4d89b27ab96fd6d6b2d9 | {} | 1 | NULL |
+----------------------------------+-------+---------+--------------------+
5 rows in set (0.00 sec)
MariaDB [(none)]> select * from keystone.service;
+----------------------------------+----------+---------+-----------------------------------------------------------+
| id | type | enabled | extra |
+----------------------------------+----------+---------+-----------------------------------------------------------+
| 4c0cdee367d14a66aa3921fe68e4b63e | identity | 1 | {"description": "OpenStack Identity", "name": "keystone"} |
+----------------------------------+----------+---------+-----------------------------------------------------------+
1 row in set (0.00 sec)
MariaDB [(none)]>
QQ群⑧：
窥视卡
雷达卡
发表于 2017-6-26 20:38:18
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
千斤顶
显身卡