← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1456441] Re: keystone wsgi does not read files in /etc/keystone/*

 

The same issue affects the installation of glance. 
 
In my case it had been necessary to copy the contents of the files 
/etc/keystone/keystone.conf
/etc/glance/glance-api.conf
/etc/glance/glance-registry.conf

into, respectively, the files:
/usr/share/keystone/keystone-dist.conf
/usr/share/glance/glance-api-dist.conf
/usr/share/glance/glance-registry-dist.conf

adding, respectively, also the lines in section [paste_deploy]:
config_file = /usr/share/keystone/keystone-dist-paste.ini
config_file = /usr/share/glance/glance-api-dist-paste.ini
config_file = /usr/share/glance/glance-registry-dist-paste.ini

Moreover, it had been necessary copying the contents of the other files
in folders /etc/keystone, /etc/glance into the folders
/usr/share/keystone, /usr/share/glance. I'm not sure if it is necessary
to copy all the file inside them. I'm only sure about the files with
name "policy.json".

After moving/copying files, remember to give the right permissions to keystone and glance:
 chown -R keystone:keystone /usr/share/keystone/
 chown -R glance:glance /usr/share/glance/


** Changed in: glance
       Status: New => Invalid

** Changed in: glance
       Status: Invalid => Confirmed

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1456441

Title:
  keystone wsgi does not read files in /etc/keystone/*

Status in OpenStack Image Registry and Delivery Service (Glance):
  Confirmed
Status in OpenStack Identity (Keystone):
  Confirmed

Bug description:
  Keystone launched through wsgi was not picking up the connection
  string in /etc/keystone/keystone.conf.  Manual run of keystone-all
  identified that there was a collision with /usr/share/keystone
  /keystone-dist.conf which contains an entry for connection in
  [database].

  Commented out the line in keystone-dist.conf and restarted apache.
  Correct connection string was then picked up from
  /etc/keystone/keystone.conf.

  CentOS 7 minimal install
  Followed install guide for Kilo.
  Encountered error Access denied keystone@localhost at step of creating openstack service identity because the wrong credentials from the .conf conflict were being passed to mariadb.

To manage notifications about this bug go to:
https://bugs.launchpad.net/glance/+bug/1456441/+subscriptions


References