Monday, July 21, 2014

BASICS OF OPENSTACK KEYSTONE (Identity Service)

Many people do find it very difficult to open the documentation again and again and finding the appropriate commands to get their issues resolved. So i though of writing some of the commands that users most often use. I will start with the services of kyestone service that is called identity service.

nova-manage service list, Just to see all the nova services and their statuses.







Now we shall start from Keystone, because its the main module that handles authentication of Openstack users and will get in your way at the earlier stages for making users and setting up their credentials. We shall now see in details what it does.

  • Identity Service Code Named KEYSTONE:

    • For listing all the users:

      • keystone user-list

    • Listing all the keystone services

      • keystone service-list

    • Creating New User:
      • keystone user-create --name --tenant-id --pass --email --enabled<True | False>
    Example:  keystone user-create --name=ali --tenant=admin --pass=ali --enabled=True


    • Updating a Existing user:
      • keysotne user-update --name --email --enabled<True | False> --user<id | name> 

    • Change User's Password:

      • keystone user-password-update --pass <password> <user>

    • User Role List:

      • keystone user-role-list --user

    • Create New Tenant:

      • keystone tenant-create --name --description --enabled

    • List Identity Service Catalog:

      • keystone catalog (Lists service catalog)

    • To Discover Endpoints:

      • keystone endpoints (Lists configured service endpoints

KEYSTONE SERVICE:
If you want to see that if keystone service is up you can see by executing the command ps -ef | grep -i keystone-all




KEYSTONE LOGS:

To see the logs for keystone you can go into the directory cd /var/log/keystone/ and then use command tail -f keystone.log or you can directly execute the command without going into the specified directory by using tailf /var/log/keystone/keystone.log

KEYSTONE START | STOP | STATUS:
The services can be started stopped and its status can be checked by executing the given commands.

sudo service openstack-keystone status OR /etc/init.d/openstack-keystone status


For stopping or restarting just replace start by the action you want to perform.

Note: I will hopefully publish blogpost for each of openstack module. stay tuned !! suggestions for improvement are always welcome.