OpenStack之四： keystone验证服务（端口5000）

#官网地址：https://docs.openstack.org/keystone/stein/install/keystone-install-rdo.html

#：创建库，并授权

MariaDB [(none)]> CREATE DATABASE keystone;
MariaDB [(none)]> GRANT ALL PRIVILEGES ON keystone.* TO ‘keystone‘@‘%‘  IDENTIFIED BY ‘keystone123‘;

#： 在控制端安装keystone服务

[root@localhost ~]# yum install openstack-keystone httpd mod_wsgi -y

#： 配置keystone

[root@localhost ~]# vim /etc/keystone/keystone.conf
[database]
connection=mysql+pymysql://keystone:keystone123@www.magedu.net/keystone

[token]
provider = fernet

#: 解析域名

[root@localhost ~]# vim /etc/hosts
192.168.7.101 www.magedu.net

#： 安装haproxy

[root@localhost ~]# yum install haproxy -y

#: 配置haproxy

[root@localhost ~]# vim /etc/haproxy/haproxy.cfg
listen mysqlserver
bind 192.168.7.101:3306
mode tcp
server mysql 192.168.7.105:3306 check inter 2s fall 3 rise 5

#：配置sysctl

[root@localhost ~]# vim /etc/sysctl.conf
net.ipv4.ip_nonlocal_bind = 1
[root@localhost ~]# sysctl -p

#: 启动haproxy

[root@localhost ~]# systemctl start haproxy
[root@localhost ~]# systemctl enable haproxy


#：初始化数据库

[root@localhost ~]# su -s /bin/sh -c "keystone-manage db_sync" keystone

#： 提供两个认证文件

[root@localhost ~]# keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone
[root@localhost ~]# keystone-manage credential_setup --keystone-user keystone --keystone-group keystone

#：修改http 的配置

[root@localhost ~]# vim  /etc/httpd/conf/httpd.conf
ServerName 192.168.7.101:80

#：做一个软连接

[root@localhost ~]# ln -s /usr/share/keystone/wsgi-keystone.conf /etc/httpd/conf.d/


#：绕过keystone用命令生成token