Monday, July 21, 2014


Many people do find it very difficult to open the documentation again and again and finding the appropriate commands to get their issues resolved. So i though of writing some of the commands that users most often use. I will start with the services of kyestone service that is called identity service.

nova-manage service list, Just to see all the nova services and their statuses.

Now we shall start from Keystone, because its the main module that handles authentication of Openstack users and will get in your way at the earlier stages for making users and setting up their credentials. We shall now see in details what it does.

  • Identity Service Code Named KEYSTONE:

    • For listing all the users:

      • keystone user-list

    • Listing all the keystone services

      • keystone service-list

    • Creating New User:
      • keystone user-create --name --tenant-id --pass --email --enabled<True | False>
    Example:  keystone user-create --name=ali --tenant=admin --pass=ali --enabled=True

    • Updating a Existing user:
      • keysotne user-update --name --email --enabled<True | False> --user<id | name> 

    • Change User's Password:

      • keystone user-password-update --pass <password> <user>

    • User Role List:

      • keystone user-role-list --user

    • Create New Tenant:

      • keystone tenant-create --name --description --enabled

    • List Identity Service Catalog:

      • keystone catalog (Lists service catalog)

    • To Discover Endpoints:

      • keystone endpoints (Lists configured service endpoints

If you want to see that if keystone service is up you can see by executing the command ps -ef | grep -i keystone-all


To see the logs for keystone you can go into the directory cd /var/log/keystone/ and then use command tail -f keystone.log or you can directly execute the command without going into the specified directory by using tailf /var/log/keystone/keystone.log

The services can be started stopped and its status can be checked by executing the given commands.

sudo service openstack-keystone status OR /etc/init.d/openstack-keystone status

For stopping or restarting just replace start by the action you want to perform.

Note: I will hopefully publish blogpost for each of openstack module. stay tuned !! suggestions for improvement are always welcome.