Re: [Openstack] confuse about keystone rule

Hi William: Some new documentation just landed that should clear things up: http://docs.openstack.org/trunk/openstack-compute/admin/content/keystone-concepts.html (Short answer: by default, only the "admin" role has meaning unless you edit the policy.conf files). Take care, Lorin -- Lorin H

Re: [Openstack] confuse about keystone rule

Hi, You can name them as you want. You have to match the users in the *-paste.ini files for each service you want to integrate with keystone for the authentication. Each service has a policy.json where you configure the authorization stuff. For example in devstack nova, glance, swift users belo

[Openstack] confuse about keystone rule

Hi, I am a little confuse about keystone roles, there are several role like admin, Member, KeystoneAdmin, KeystoneServiceAdmin, sysadmin, netadmin, I want to know does those name have special means, or just a name and I can name my role with any name I like, if they have special means, why should I