Installing Keystone

The Keystone service should be installed and configured on the Controller node. This procedure uses the sample script described in The Sample Keystone Script. Read the section before using the script.

How to Install and Configure Keystone

1. Create the shared token for Keystone and other OpenStack services.

   The token consists of a random string of characters. Note that the openssl command prompts you for the components that constitute the key such as country, state, and so on.

   controller# openssl rand -hex 10
   token-string

2. Set the token to a shell variable.

   controller# export MY_SERVICE_TOKEN=token-string

3. Modify parameters in the /etc/keystone/keystone.conf file.

   The configuration should resemble the following example:

   [DEFAULT]
   admin_token = token-string
   qpid_hostname=$CONTROLLER_ADMIN_NODE
   rabbit_host=$CONTROLLER_ADMIN_NODE
   ...
   [database]
   connection = mysql://keystone:service-password@$CONTROLLER_ADMIN_NODE/keystone
   

4. Enable the Keystone SMF service.

   controller# svcadm enable keystone

5. Populate the Keystone database by using the Keystone sample script.

   Make sure that you have reviewed and modified the script to your preference before running the script. The procedures assume that the sample script is not customized.

   controller# CONTROLLER_PUBLIC_ADDRESS=$CONTROLLER_ADMIN_NODE \
   CONTROLLER_ADMIN_ADDRESS=$CONTROLLER_ADMIN_NODE \
   CONTROLLER_INTERNAL_ADDRESS=$CONTROLLER_ADMIN_NODE \
   SERVICE_TOKEN=$MY_SERVICE_TOKEN \
   ADMIN_PASSWORD=admin-password \
   SERVICE_PASSWORD=service-password \
   /usr/demo/openstack/keystone/sample_data.sh