Questions tagged [openstack-keystone]

46 questions
5
votes
2 answers

change keypair in an active instance

Openstack version - Pike In Openstack there is no provision to change the keypair of any active instance. Queens and Rocky give the option in rebuild command, but that will re-create the instance again. 1. Is there any way to change the keypair of…
5
votes
1 answer

OpenStack Swift TempAuth authentication prod usage

Almost in every OpenStack Swift documentation is mentioned that TempAuth is a solution just for test non-prod environment (however it's fully functional). The key reason to don't use this approach in prod that user-creds are stored in plain…
user1459144
  • 4,439
  • 5
  • 28
  • 35
2
votes
1 answer

Confused by tenant, project, user, account in openstack and swift

I am confused by tenant in openstack and swift. I have multiple machines on C3 under tenant called myTenant. Here tenant is the same with project. I cannot understand what do tenant and project mean here. I also have a swift container, which I can…
BAE
  • 8,550
  • 22
  • 88
  • 171
1
vote
1 answer

openstack issue a token with no expire time

I'm developing a micro-service which needs to connect to my openstack via REST API: I'm using this command in CLI to create an access token (X-Auth-Token): openstack --os-system-scope all token issue Is it possible to create the admin token with no…
Vahid Alimohamadi
  • 4,900
  • 2
  • 22
  • 37
1
vote
0 answers

If my keystone token expires after login from Horizon, will I be logged out during the operation?

while analyzing Keystone Token in OpenStack Horizon, I have a question. After login at Horizon, I confirmed that Horizon will logout after the Token expiration time even if session time is remaining. But all I checked is when I didn't do anything…
kjharu
  • 31
  • 3
1
vote
2 answers

XDG_SESSION_TYPE error on devstack installation

can someone please help with the below issue? Facing below issue while installing devstack on ubuntu 18.04. python - 3.6.9 stack user with sudo access. pip version - pip 20.2.4 from /usr/local/lib/python3.6/dist-packages/pip (python 3.6) INFO…
1
vote
1 answer

Authenticate against keystone API using Application Credential

I can authenticate against the keystone API using the following code: from keystoneauth1 import session from keystoneauth1.identity import v3 from openstack import connection auth = v3.Password( auth_url="http://localhost:5000/v3/", …
crypticgamer
  • 101
  • 7
1
vote
1 answer

Problem while installing keystone for openstack (stein)

we are a group of french students in networks, and we need to get openstack working for a school project. We are curently facing an issue while installing keystone. After following the official openstack guide, when trying the service, we get the…
user12159265
1
vote
0 answers

Keystone error 401 output to every command/Keystone don't know Default Openstack Domain

I am currently trying to install Openstack for the first time. I followed the installation guide given by Openstack (here) The basic setup is done , and I am now trying to install the four "basic" services of Openstack : Keystone, Glance , Nova and…
Popopame
  • 492
  • 4
  • 18
1
vote
0 answers

How to get region name in custom heat resource?

I have an OpenStack deployment with 2 regions. Keystone and Horizon are common for both regions. And each region has its own Nova, Heat, Neutron, Glance etc. I am writing a custom heat resource which should behave differently depending on the region…
Andrey
  • 11
  • 2
1
vote
0 answers

Forbidden: You are not authorized to perform the requested action

I am installing openstack devstack deploying identity ldap I followed these steps: i followed the step of the quick start installation of devstack too i created a local.conf file with the following contents: …
Sam Math
  • 11
  • 2
1
vote
0 answers

Installing and Configuring Keystone for Openstack Queens on RHEL

Run the following command to install the packages: # yum install openstack-keystone httpd mod_wsgi Edit the /etc/keystone/keystone.conf file and complete the following actions: In the [database] section, configure database access: …
Madhav
  • 41
  • 6
1
vote
0 answers

devstack - how to reduce openstack keystone X-Subject-Token size

Through devstack I have installed openstack. I issued following command to get token curl -i -H "Content-Type: application/json" -d '{ "auth": { "identity": { "methods": ["password"], "password": { "user": { "name": "admin", "domain": { "id":…
Santhosh
  • 31
  • 1
  • 7
1
vote
2 answers

Failed to discover available identity in OpenStack

I have a little problem with OpenStack installation. When i use this: openstack service list the terminal return this error: Failed to discover available identity versions when contacting http://controller:35357/v3. Attempting to parse version…
Difettoso
  • 51
  • 1
  • 1
  • 10
1
vote
0 answers

Custom Authentication Middleware for Standalone Openstack Cinder Service

I am trying to build a standalone cinder service. I would like to build a custom authentication middleware and use that instead of Keystone. Does anyone know of any blog posts, articles, etc. that documents the process of building custom…
1
2 3 4