Because most OpenStack services must access the Identity
Service, you must configure the IP address of the
keystone
server to be able to access it. You must
also configure the admin_tenant_name
,
admin_user
, and admin_password
options
for each service to work.
Generally, this section looks like this:
[keystone_authtoken] auth_host = 127.0.0.1 auth_port = 35357 auth_protocol = http admin_tenant_name = %SERVICE_TENANT_NAME% admin_user = %SERVICE_USER% admin_password = %SERVICE_PASSWORD%
The debconf system helps users configure the
auth_host
, admin_tenant_name
,
admin_user
and admin_password
options.
The following screens show an example Image Service configuration:
![](figures/4/figures/debconf-screenshots/service_keystone_authtoken_server_hostname.png)
![](figures/4/figures/debconf-screenshots/service_keystone_authtoken_admin_tenant_name.png)
![](figures/4/figures/debconf-screenshots/service_keystone_authtoken_tenant_admin_user.png)
![](figures/4/figures/debconf-screenshots/service_keystone_authtoken_admin_password.png)
This information is stored in the configuration file for each service. For example:
/etc/ceilometer/ceilometer.conf /etc/nova/api-paste.ini /etc/glance/glance-api-paste.ini /etc/glance/glance-registry.ini /etc/cinder/cinder.conf /etc/neutron/neutron.conf
The Debian OpenStack packages offer automation for this, so OpenStack users do not have to manually edit the configuration files.