Book Image

OpenStack Essentials - Second Edition

By : Dan Radez
Book Image

OpenStack Essentials - Second Edition

By: Dan Radez

Overview of this book

OpenStack is a widely popular platform for cloud computing. Applications that are built for this platform are resilient to failure and convenient to scale. This book, an update to our extremely popular OpenStack Essentials (published in May 2015) will help you master not only the essential bits, but will also examine the new features of the latest OpenStack release - Mitaka; showcasing how to put them to work straight away. This book begins with the installation and demonstration of the architecture. This book will tech you the core 8 topics of OpenStack. They are Keystone for Identity Management, Glance for Image management, Neutron for network management, Nova for instance management, Cinder for Block storage, Swift for Object storage, Ceilometer for Telemetry and Heat for Orchestration. Further more you will learn about launching and configuring Docker containers and also about scaling them horizontally. You will also learn about monitoring and Troubleshooting OpenStack.
Table of Contents (20 chapters)
OpenStack Essentials Second Edition
Credits
About the Author
About the Reviewer
www.PacktPub.com
Preface
Index

Troubleshooting Keystone and authentication


Nothing is more frustrating than not being able to log in to your cluster to see what is going on. Thankfully, OpenStack offers an authentication override to bypass authentication and allow you to make Keystone calls to see services, endpoints, and other Keystone resources. This is called using the Keystone admin service token. In Chapter 2, Identity Management, we looked at creating a keystonerc file. To use this service token to override authentication, you need to use a similar methodology.

Note

If you encounter trouble using your admin token to override authentication, check the file /usr/share/keystone/keystone-dist-paste.ini and look in the sections [pipeline:public_api], [pipeline:admin_api], and [pipeline:api_v3] for admin_token_auth. If the key admin_token_auth is missing then this method of authentication has been disabled.

Start by getting the current service token value from the keystone.conf file:

$ grep admin_token /etc/keystone/keystone...