Ask Your Question

How do you add the identity service?

asked 2015-04-24 14:40:47 -0500

anonymous user


updated 2015-04-27 09:58:03 -0500

I am trying to install and configure OpenStack. I am trying to add the identity service.

I am trying to follow "To configure prerequisites" with step 1c here

I ran those Grant statements which I will post here:

GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' \  

GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' \

I tried replacing the KEYSTONE_DBPASS with my own creative password. But they didn't update any rows. Therefore they had no effect.

What should I do to "Grant proper access to the keystone database"? Or is this step not always necessary?

edit retag flag offensive close merge delete


When you update database server metadata, usually you don't see message "Rows updated".

dbaxps gravatar imagedbaxps ( 2015-04-28 00:46:55 -0500 )edit

2 answers

Sort by ยป oldest newest most voted

answered 2015-04-27 10:08:14 -0500

updated 2015-04-27 10:08:54 -0500

This step is necessary in order to let keystone user access the keystone DB. First command allows local access to DB, the latter allows remote access to keystone DB.

That said, you could test if it is working running this command on your node:

mysql --host=localhost --user=keystone --password=YOUR_CREATIVE_PASSWORD keystone

Or this command on a remote node:

mysql --host=REMOTE-IP --user=keystone --password=YOUR_CREATIVE_PASSWORD keystone
edit flag offensive delete link more

answered 2015-04-27 14:18:52 -0500

Abtul gravatar image

In my opinion, the directions need to explicitly say that entering a password is mandatory during the installation process. Without entering a password, and remembering it for the KEYSTONE_DBPASS above, the installation of OpenStack won't work.

The section "Finalize Installation" #2 (mysql-secure-installation) is where it should say that a password must be entered: (

I assumed a blank password was acceptable based on the prompts and messages I saw. I was using RHEL v.7. Does anyone else agree that the above OpenStack document should say this? If not, why?

edit flag offensive delete link more

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower


Asked: 2015-04-24 14:40:47 -0500

Seen: 94 times

Last updated: Apr 27 '15