Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 980902

Summary:	Nova doc: keystone auth is not set up
Product:	Red Hat OpenStack	Reporter:	Attila Darazs <adarazs>
Component:	doc-Installation_and_Configuration_Guide	Assignee:	Stephen Gordon <sgordon>
Status:	CLOSED CURRENTRELEASE	QA Contact:	ecs-bugs
Severity:	high	Docs Contact:
Priority:	high
Version:	3.0	CC:	hateya, sgordon
Target Milestone:	async	Keywords:	Documentation, Triaged, ZStream
Target Release:	3.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	Red_Hat_OpenStack-Installation_and_Configuration_Guide-3-web-en-US-3-30.el6eng	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:	Build: CSProcessor Builder Version 1.11 Build Name: 15807, Installation and Configuration Guide-3-1 Build Date: 02-07-2013 17:01:56 Topic ID: 16007-459798 [Latest]
Last Closed:	2014-01-06 04:25:39 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1011085

Description Attila Darazs 2013-07-03 13:30:01 UTC

Title: Setting the Database Connection String

Describe the issue:
In this chapter: "10.3.4. Configuring the Compute Service", we should have a description how to setup nova's keystone auth (as we do with every other module).

This way simple commands like "nova image-list" fails.

Suggestions for improvement:
Add this line to /etc/nova/nova.conf
auth_strategy=keystone

add auth info to /etc/nova/api-paste.ini:
in the [filter:authtoken] section:
auth_version = v2.0
auth_port=35357
admin_user=compute
admin_password=PASSWORD
auth_protocol=http
admin_tenant_name=services
auth_host=IP

where IP is the keystone api's IP.

Comment 2 Stephen Gordon 2013-07-17 15:11:24 UTC

(In reply to Attila Darazs from comment #0)
> Title: Setting the Database Connection String
> 
> Describe the issue:
> In this chapter: "10.3.4. Configuring the Compute Service", we should have a
> description how to setup nova's keystone auth (as we do with every other
> module).
> 
> This way simple commands like "nova image-list" fails.
> 
> Suggestions for improvement:
> Add this line to /etc/nova/nova.conf
> auth_strategy=keystone
> 
> add auth info to /etc/nova/api-paste.ini:
> in the [filter:authtoken] section:
> auth_version = v2.0
> auth_port=35357
> admin_user=compute
> admin_password=PASSWORD
> auth_protocol=http
> admin_tenant_name=services
> auth_host=IP
> 
> where IP is the keystone api's IP.

Added a section covering configuration of:

* admin_user=compute
* admin_password=PASSWORD
* admin_tenant_name
* auth_host

Left out:

* auth_version
* auth_port
* auth_protocol

As defaults are expected to be OK.

"Configuring Authentication" - ID: 21112 [rev: 478982]
"Configuring Authentication" - ID: 21112 [rev: 478983]