Identity service keystone | what is openstack | how to make openstack commands | connect ubuntu with database | install ubuntu on virtualbox | commands for identity service keystone in cloud computing

1. IDENTIT Y SERVICE
KEYSTONE
C L O U D C O M P U T I N G

2. R A B I A Z A F A R
1 7 5 8 1 5 5 6 - 0 4 5
M U B A R A K A N A Z I R
1 7 5 8 1 5 5 6 - 0 3 7
A Q S A R E H M A N
1 7 5 8 1 5 5 6 - 0 2 3

3. CONTENT
• Overview
• Install and configure
– Prerequisites
– Install and configure components
– Configure the apache HTTP server
– Finalize the installation
• Create a domain, projects, roles and user
• Verify operation
• Create OpenStack client environment scripts
– Creating the scripts
– Using the scripts

4. OPEN-STACK
• Open-stack is an open-source cloud computing software
platform which provides an IaaS service model. It consists of a
group of projects that allow managing storage and
networking resource through a web-based dashboard, CLI
tools, or a REST API.

5. COMPONENTS OF OPEN STACK
Open-stack consists of a number of components. At CERN, there are
deployed 6 components:
• Open-stack Compute (Nova)
• Block Storage (Cinder)
• Identity Service (Keystone)
• Image Service (Glance)Dashboard (Horizon)
• Orchestration (Heat)
• Dashboard (horizon)

6. IDENTITY SERVICE (KEYSTONE)
• Keystone integrates functions for authentication, authorization, registration of tenants
and users, granting tokens, and creating polices for users and services. The important
thing is that Keystone is used between all Open-stack services and provides a
catalogue of available services and locations of API endpoints.

7. IDENTITY SERVICE KEYSTONE
• Step 1: download and install oracle virtual box
• Step 2: download Ubuntu server
• Step 3: create a base machine with minimum software boot options

8. CREATE VIRTUAL MACHINE

9. INSTALLING UBUNTU SERVER

10. KEYSTONE IDENTITY SERVICE

11. IDENTITY SERVICE KEYSTONE

12. INSTALL AND
CONFIGURE

13. INSTALL MYSQL ON UBUNTU

14. DATABASE ACCESS
• Exit from terminal
• Again open terminal and type command “mysql” and press enter and then enter
password.
• ALTER USER ‘root’@’localhost’ IDENTIFIED WITH mysql_native_password BY ‘password’;
• FLUSH PRIVILEGES;

16. INSTALL AND
CONFIGURE
COMPONENTS

17. INSTALL AND CONFIGURE COMPONENTS
• Run the following command to install packages:
– #apt install keystone
• Edit the /etc/keystone/keystone.conf file and complete the following actions;
– In the [database] section, configure database access:
– In the [token] section, configure the Fernet token provider:
• Populate the identity service database:

18. INSTALL AND CONFIGURE COMPONENTS
• Initialized fernet key respositories:
• Bootstrape the identity service:
• Configure HTTP service:

19. FINALIZED THE
INSTALLATION

20. FINALIZED THE INSTALLATION
• Restart the server
• Restart the administrative account by setting the proper environmental variables:

21. CREATE A DOMAIN,
PROJECTS, USERS, AND
ROLES

22. CREATE A DOMAIN, PROJECTS, USERS,
AND ROLES
• The Identity service provides authentication services for each OpenStack service. The
authentication service uses a combination of domains, projects, users, and roles.
• Although the “default” domain already exists from the keystone-manage
bootstrap step in this guide, a formal way to create a new domain would be:

23. CONTINUE…
• Service project contain a unique user for each service that we add in our environment:
• Create the service project:

24. CONTINUE… (PROJECT)
• Creates the myproject project and myuser user.
• My project

25. CONTINUE… (USER)
• Create the Myuser user

26. CONTINUE… (RULE)
• Create myrole role:
• Add the myrole role into myproject project and myuser user:

27. VERIFY
OPERATION

28. VERIFY OPERATION
• Unset the temporary OS_AUTH_URL and OS_PASSWORD environment variable
(perform on controller node)
• As the admin user request an authentication token:

29. VERIFY OPERATION
• As the myuser user is created in previous, request an authentication token: