Re: [Openstack] Keystone Woes

2013-04-14 Thread Daniel Ellison
On 2013-04-14, at 10:00 AM, Dolph Mathews wrote: > Short answer: yes. > > There are two types of token_format options available, PKI and UUID. > > UUID tokens result in increased network chatter as they must be validated > remotely, whereas PKI tokens are big, self-signed, and can be validated

Re: [Openstack] Keystone Woes

2013-04-14 Thread Dolph Mathews
Short answer: yes. There are two types of token_format options available, PKI and UUID. UUID tokens result in increased network chatter as they must be validated remotely, whereas PKI tokens are big, self-signed, and can be validated offline. You can choose which format you'd like by setting key

Re: [Openstack] Keystone Woes

2013-04-13 Thread Daniel Ellison
On 2013-04-13, at 5:24 PM, Dolph Mathews wrote: > Hmm, well it looks like you already have debug enabled, which is indicating > that the username + password combination is bad (if debug was disabled, you'd > get a much more opaque error message). The tenant name you specified would > not have b

Re: [Openstack] Keystone Woes

2013-04-13 Thread Dolph Mathews
Hmm, well it looks like you already have debug enabled, which is indicating that the username + password combination is bad (if debug was disabled, you'd get a much more opaque error message). The tenant name you specified would not have been checked yet. If 'admin' appears in your keystone user-li

Re: [Openstack] Keystone Woes

2013-04-13 Thread Daniel Ellison
On 2013-04-13, at 1:23 PM, Anne Gentle wrote: > Is this a regression or manifestation of this bug? > > https://bugs.launchpad.net/keystone/+bug/1002917 > > Anne I'll take a look at that bug. I currently don't have the depth of knowledge on OpenStack to judge myself, but maybe something in ther

Re: [Openstack] Keystone Woes

2013-04-13 Thread Daniel Ellison
On 2013-04-13, at 1:24 PM, Dolph Mathews wrote: > It looks like you're doing everything correctly, except OS_PASSWORD is *NOT* > the same thing as the static admin_token in keystone.conf. You're right, actually. I DID use the admin_token for OS_PASSWORD. I'll definitely be fixing that. But as l

Re: [Openstack] Keystone Woes

2013-04-13 Thread Dolph Mathews
It looks like you're doing everything correctly, except OS_PASSWORD is *NOT* the same thing as the static admin_token in keystone.conf. Passwords are user-specific attributes created using the --pass argument on user-create for example. You may have set it to be the same as keystone.conf's admin_t

Re: [Openstack] Keystone Woes

2013-04-13 Thread Anne Gentle
Is this a regression or manifestation of this bug? https://bugs.launchpad.net/keystone/+bug/1002917 Anne On Sat, Apr 13, 2013 at 12:13 PM, Daniel Ellison wrote: > Hi all, > > I joined this list just now to solve a particular problem, but once I'm > past this I hope to be giving back to the co

[Openstack] Keystone Woes

2013-04-13 Thread Daniel Ellison
Hi all, I joined this list just now to solve a particular problem, but once I'm past this I hope to be giving back to the community. I have spent the past week trying to get Keystone installed and configured properly. I want to show a running OpenStack to my manager for a proof of concept I wa