搭建云平台 3 Day _______如何安装配置云计算的认证服务

痛定思痛。 2023-10-02 17:02 8阅读 0赞

Keystone安装配置  
**Keystone安装配置**  
0. 下载安装openstack软件仓库（queens版本）  
yum install centos-release-openstack-queens -y  
\#看见complete则表示成功了（完成了）  
![在这里插入图片描述][watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAcXFfNDY5MDY0MTM_size_20_color_FFFFFF_t_70_g_se_x_16]  
yum upgrade  
\#看见complete则表示成功了（完成了）  
![在这里插入图片描述][watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAcXFfNDY5MDY0MTM_size_20_color_FFFFFF_t_70_g_se_x_16 1]

yum install python-openstackclient -y  
\#看见complete则表示成功了（完成了）  
![在这里插入图片描述][4b08a028e3054df8b3041074ed3d2d3f.png]

yum install openstack-selinux -y  
\#看见complete则表示成功了（完成了）  
![在这里插入图片描述][97ba45be52bf40b0b2159cef51cbf31c.png]

1.  创建keystone数据库并授权  
    mysql -u root -p  
    CREATE DATABASE keystone;  
    GRANT ALL PRIVILEGES ON keystone.\* TO ‘keystone’@‘localhost’ IDENTIFIED BY ‘keystone’;  
    GRANT ALL PRIVILEGES ON keystone.\* TO ‘keystone’@’%’ IDENTIFIED BY ‘keystone’;  
    GRANT ALL PRIVILEGES ON keystone.\* TO ‘keystone’@‘openstackcontroller’ IDENTIFIED BY ‘keystone’;  
    ![在这里插入图片描述][watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAcXFfNDY5MDY0MTM_size_20_color_FFFFFF_t_70_g_se_x_16 2]
2.  安装、配置组件  
    yum install openstack-keystone httpd mod\_wsgi -y  
    生成一个随机值在初始的配置中作为管理员的令牌  
    ![在这里插入图片描述][b19032eb8bb24a6ca2ec7c9e60803935.png]  
    此处我报错了  
    ![在这里插入图片描述][watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAcXFfNDY5MDY0MTM_size_20_color_FFFFFF_t_70_g_se_x_16 3]  
    我们此处强制安装  
    yum install -y python2-qpid-proton-0.22.0-1.el7.x86\_64  
    \#看见complete则表示成功了（完成了）  
    ![在这里插入图片描述][watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAcXFfNDY5MDY0MTM_size_20_color_FFFFFF_t_70_g_se_x_16 4]  
    安装包python2-qpid-proton-0.22.0-1.el7.x86\_64后再次安装、配置组件  
    yum install openstack-keystone httpd mod\_wsgi -y  
    可以看到complete，安装成功了  
    ![在这里插入图片描述][watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAcXFfNDY5MDY0MTM_size_20_color_FFFFFF_t_70_g_se_x_16 5]  
    openssl rand -hex 10  
    得到admin\_token = xxxxxxxxx  
    ![在这里插入图片描述][93801f5be8694aa491b3b84557d569dc.png]
3.  编辑 /etc/keystone/keystone.conf  
    \[DEFAULT\]  
    admin\_token = xxxxxx \#输入你上面获得的令牌  
    \[database\]  
    connection = mysql+pymysql://keystone:PASSWORD@controller/keystone  
    \[token\]  
    provider = fernet  
    ![在这里插入图片描述][watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAcXFfNDY5MDY0MTM_size_20_color_FFFFFF_t_70_g_se_x_16 6]

![在这里插入图片描述][watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAcXFfNDY5MDY0MTM_size_20_color_FFFFFF_t_70_g_se_x_16 7]

![在这里插入图片描述][watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAcXFfNDY5MDY0MTM_size_20_color_FFFFFF_t_70_g_se_x_16 8]

1.  初始化数据库  
    keystone-manage db\_sync  
    ![在这里插入图片描述][799c3cd499394de79de70feb2b4b6ee1.png]
2.  初始化Fernet密钥库以生成令牌  
    keystone-manage fernet\_setup --keystone-user keystone --keystone-group keystone  
    keystone-manage credential\_setup --keystone-user keystone --keystone-group keystone
3.  对Keystone应用Bootstrap框架执行初始化操作 引导身份认证服务（此处为一行代码）  
    keystone-manage bootstrap --bootstrap-password keystone --bootstrap-admin-url http://controller:5000/v3/ --bootstrap-internal-url http://controller:5000/v3/ --bootstrap-public-url http://controller:5000/v3/ --bootstrap-region-id RegionOne  
    ![在这里插入图片描述][watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAcXFfNDY5MDY0MTM_size_20_color_FFFFFF_t_70_g_se_x_16 9]

--------------------

1.  配置Apache HTTP服务器  
    1)编辑/etc/httpd/conf/httpd.conf文件，配置ServerName选项，使其指向控制节点  
    ServerName controller

vim /etc/httpd/conf/httpd.conf  
![在这里插入图片描述][watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAcXFfNDY5MDY0MTM_size_20_color_FFFFFF_t_70_g_se_x_16 10]

2)创建一个到/usr/share/keystone/wsgi-keystone.conf文件的链接文件  
ln -s /usr/share/keystone/wsgi-keystone.conf /etc/httpd/conf.d/

3)systemctl enable httpd  
systemctl start httpd  
![在这里插入图片描述][watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAcXFfNDY5MDY0MTM_size_20_color_FFFFFF_t_70_g_se_x_16 11]  
验证是否成功：  
三种，缺一不可：  
法一：网页输入虚拟机ip会出现下图的页面  
![在这里插入图片描述][watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAcXFfNDY5MDY0MTM_size_20_color_FFFFFF_t_70_g_se_x_16 12]  
法二：![在这里插入图片描述][watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAcXFfNDY5MDY0MTM_size_20_color_FFFFFF_t_70_g_se_x_16 13]  
法三：  
![在这里插入图片描述][2819089d046d4ba9a11708675c5fce46.png]  
没有发现密码，所以我们进行下面的操作。设置环境变量，配置管理员账户和密码

4)设置环境变量，配置管理员账户  
export OS\_USERNAME=admin  
export OS\_PASSWORD=ADMIN\_PASS  
export OS\_PROJECT\_NAME=admin  
export OS\_USER\_DOMAIN\_NAME=Default  
export OS\_PROJECT\_DOMAIN\_NAME=Default  
export OS\_AUTH\_URL=http://controller:35357/v3  
export OS\_IDENTITY\_API\_VERSION=3  
将其中的ADMIN\_PASS替换为上述keystone-manage bootstrap命令中使用的密码  
![\-----------------------][-----------------------]  
可以看见结果出来了，成功了

[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAcXFfNDY5MDY0MTM_size_20_color_FFFFFF_t_70_g_se_x_16]: https://img-blog.csdnimg.cn/a508473a11824a54baf0986e30d3a641.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBAcXFfNDY5MDY0MTM=,size_20,color_FFFFFF,t_70,g_se,x_16
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAcXFfNDY5MDY0MTM_size_20_color_FFFFFF_t_70_g_se_x_16 1]: https://img-blog.csdnimg.cn/f53c71bcb5a64b219dbacb62f5d3d404.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBAcXFfNDY5MDY0MTM=,size_20,color_FFFFFF,t_70,g_se,x_16
[4b08a028e3054df8b3041074ed3d2d3f.png]: https://img-blog.csdnimg.cn/4b08a028e3054df8b3041074ed3d2d3f.png
[97ba45be52bf40b0b2159cef51cbf31c.png]: https://img-blog.csdnimg.cn/97ba45be52bf40b0b2159cef51cbf31c.png
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAcXFfNDY5MDY0MTM_size_20_color_FFFFFF_t_70_g_se_x_16 2]: https://img-blog.csdnimg.cn/66570eac937741a5b4640964dd5e78d6.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBAcXFfNDY5MDY0MTM=,size_20,color_FFFFFF,t_70,g_se,x_16
[b19032eb8bb24a6ca2ec7c9e60803935.png]: https://img-blog.csdnimg.cn/b19032eb8bb24a6ca2ec7c9e60803935.png
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAcXFfNDY5MDY0MTM_size_20_color_FFFFFF_t_70_g_se_x_16 3]: https://img-blog.csdnimg.cn/4713cd844f194792b6378ff51fb3c1d6.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBAcXFfNDY5MDY0MTM=,size_20,color_FFFFFF,t_70,g_se,x_16
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAcXFfNDY5MDY0MTM_size_20_color_FFFFFF_t_70_g_se_x_16 4]: https://img-blog.csdnimg.cn/d75d87899b174168bac458a74b305c3a.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBAcXFfNDY5MDY0MTM=,size_20,color_FFFFFF,t_70,g_se,x_16
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAcXFfNDY5MDY0MTM_size_20_color_FFFFFF_t_70_g_se_x_16 5]: https://img-blog.csdnimg.cn/50ad6322b08b4c57a664fc4721d8ced8.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBAcXFfNDY5MDY0MTM=,size_20,color_FFFFFF,t_70,g_se,x_16
[93801f5be8694aa491b3b84557d569dc.png]: https://img-blog.csdnimg.cn/93801f5be8694aa491b3b84557d569dc.png
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAcXFfNDY5MDY0MTM_size_20_color_FFFFFF_t_70_g_se_x_16 6]: https://img-blog.csdnimg.cn/428eb12572b141df9e31bdda1cc66810.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBAcXFfNDY5MDY0MTM=,size_20,color_FFFFFF,t_70,g_se,x_16
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAcXFfNDY5MDY0MTM_size_20_color_FFFFFF_t_70_g_se_x_16 7]: https://img-blog.csdnimg.cn/84898b8144f1484a84cc064d47046941.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBAcXFfNDY5MDY0MTM=,size_20,color_FFFFFF,t_70,g_se,x_16
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAcXFfNDY5MDY0MTM_size_20_color_FFFFFF_t_70_g_se_x_16 8]: https://img-blog.csdnimg.cn/624ac60b25de4208b282f10b39e89298.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBAcXFfNDY5MDY0MTM=,size_20,color_FFFFFF,t_70,g_se,x_16
[799c3cd499394de79de70feb2b4b6ee1.png]: https://img-blog.csdnimg.cn/799c3cd499394de79de70feb2b4b6ee1.png
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAcXFfNDY5MDY0MTM_size_20_color_FFFFFF_t_70_g_se_x_16 9]: https://img-blog.csdnimg.cn/d33a2365260844e18eb2b871484270f5.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBAcXFfNDY5MDY0MTM=,size_20,color_FFFFFF,t_70,g_se,x_16
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAcXFfNDY5MDY0MTM_size_20_color_FFFFFF_t_70_g_se_x_16 10]: https://img-blog.csdnimg.cn/82b5e6fa618e4f0e80232d500c33120e.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBAcXFfNDY5MDY0MTM=,size_20,color_FFFFFF,t_70,g_se,x_16
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAcXFfNDY5MDY0MTM_size_20_color_FFFFFF_t_70_g_se_x_16 11]: https://img-blog.csdnimg.cn/db1818e244be47a7a455eb41979f1e6a.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBAcXFfNDY5MDY0MTM=,size_20,color_FFFFFF,t_70,g_se,x_16
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAcXFfNDY5MDY0MTM_size_20_color_FFFFFF_t_70_g_se_x_16 12]: https://img-blog.csdnimg.cn/a31d8f9e51384109861a44c7da161547.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBAcXFfNDY5MDY0MTM=,size_20,color_FFFFFF,t_70,g_se,x_16
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAcXFfNDY5MDY0MTM_size_20_color_FFFFFF_t_70_g_se_x_16 13]: https://img-blog.csdnimg.cn/313d499dbec14ccc9f47d6fea3506270.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBAcXFfNDY5MDY0MTM=,size_20,color_FFFFFF,t_70,g_se,x_16
[2819089d046d4ba9a11708675c5fce46.png]: https://img-blog.csdnimg.cn/2819089d046d4ba9a11708675c5fce46.png
[-----------------------]: https://img-blog.csdnimg.cn/1fdfcc533d8e4bfe87bc6c50f97faac8.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBAcXFfNDY5MDY0MTM=,size_20,color_FFFFFF,t_70,g_se,x_16