（二）Open Stack（M）----Keystone安装和配置（上）

mysql -uroot -p000000 

create database keystone;

grant all privileges on keystone.* to 'keystone'@'localhost' identified by '000000';

grant all privileges on keystone.* to 'keystone'@'%' identified by '000000';

\q

openssl rand -hex 10

yum -y install openstack-keystone httpd mod_wsgi

vi /etc/keystone/keystone.conf

在[DEFAULT]下添加
admin_token = ADMIN_TOKEN  
#此处的ADMIN_TOKEN为上一步生成的随机数，请用随机数替换 ADMIN_TOKEN
#配置数据库连接
在[database]下添加
connection = mysql+pymysql://keystone:000000@controller/keystone    
#配置Fernet UUID令牌提供者
在[token]下添加
provider = fernet   

su -s /bin/sh -c "keystone-manage db_sync" keystone

mysql -uroot -p000000 -e 'show tables from keystone;'    

keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone

vi /etc/httpd/conf/httpd.conf

修改
ServerName controller

cp -p /opt/mitaka/wsgi-keystone.conf /etc/httpd/conf.d/

systemctl start httpd
systemctl enable httpd

head /etc/keystone/keystone.conf |grep admin_token

export OS_TOKEN=ADMIN_TOKEN   
#配置认证令牌，此处ADMIN_TOKEN为之前生成的随机数，请自行替换，

export OS_URL=http://controller:35357/v3  

export OS_IDENTITY_API_VERSION=3

openstack service create --name keystone --description "OpenStack Identity" identity

openstack endpoint create --region RegionOne identity public http://controller:5000/v3
openstack endpoint create --region RegionOne identity internal http://controller:5000/v3
openstack endpoint create --region RegionOne identity admin http://controller:35357/v3