Where is the admin's directory?

[Stephen Liu]

Hi all,

I'm following;

Red Hat Essex Preview
Lab Guide    
Red Hat Summit - 2012 Edition
http://fedorapeople.org/~russellb/openstack-lab-rhsummit-2012/

to set up OpenStack, Essex, on Fedora 17

I'm stuck here:
Now that an admin user has been created, that account can be used to administer keystone.
To make it easy to set the admin user's credentials in the proper environment
variables, create a keystonerc_admin file with the following contents ....
http://fedorapeople.org/~russellb/openstack-lab-rhsummit-2012/ch02s02.html

Where shall I create the file keystonerc_admin?  Where is the admin's directory?

Please help.  TIA

B.R.
SL

[Eoghan Glynn]

>  I'm following;
>  
>  Red Hat Essex Preview
>  Lab Guide
>  Red Hat Summit - 2012 Edition
>  http://fedorapeople.org/~russellb/openstack-lab-rhsummit-2012/
>  
>  to set up OpenStack, Essex, on Fedora 17
>  
>  I'm stuck here:
>  Now that an admin user has been created, that account can be used to
>  administer keystone. To make it easy to set the admin user's
>  credentials in the proper environment variables, create a
>  keystonerc_admin file with the following contents ....
>  http://fedorapeople.org/~russellb/openstack-lab-rhsummit-2012/ch02s02.html
>  
>  Where shall I create the file keystonerc_admin?  Where is the admin's
>  directory? 
You can put it anywhere you like, note that the keystone admin user is not
necessarily tied to an individual system user (in which case the RC file
would naturally live in their home directory). Instead this is an openstack
identity that a system user assumes by sourcing the keystonerc_admin file.
It may be that a single system user sometimes adopts an admin role, and
other times uses openstack as a non-admin user. Or that a group of system
users share the role of openstack admin. Or whatever. Just put the file
somewhere that's only accessible to the system users that are allowed to
be admins.

Note that there is an unrealistic aspect to this tutorial ... in practice
you may be more leary about leaving passwords in text files, in which
case the password can be re-typed for each individual command line or the
OS_PASSWORD env var set manually per-session. For the tutorial, its just
more convenient to dump it into a file.

Cheers,
Eoghan

[Stephen Liu]

Hi Eoghan,

Thanks for your advice.



- snip -

>  Note that there is an unrealistic aspect to this tutorial ... in
> practice
>  you may be more leary about leaving passwords in text files, in which
>  case the password can be re-typed for each individual command line or the
>  OS_PASSWORD env var set manually per-session. For the tutorial, its just
>  more convenient to dump it into a file. 
Whether on keystonerc_admin set:

export OS_PASSWORD= <my password>
?

Any other change I have to make additionally ?  TIA

B.R.
SL

[Stephen Liu]

Hi Eoghan,

Further to my late posting.

I have stopped there and rebooted the PC.  Please advise where can I find admin's
directory?  OR I have to start from the begining again?  Thank
 

B.R.
SL


----- Original Message -----
>  From: Eoghan Glynn <eglynn(a)redhat.com&gt;
>  To: Stephen Liu <satimis(a)yahoo.com>; Fedora Cloud SIG
> <cloud(a)lists.fedoraproject.org&gt;
>  Cc: 
>  Sent: Monday, August 13, 2012 4:43 PM
>  Subject: Re: Where is the admin's directory?
>  
>  
>  
>  
> >  I'm following;
> > 
> >  Red Hat Essex Preview
> >  Lab Guide
> >  Red Hat Summit - 2012 Edition
> >  http://fedorapeople.org/~russellb/openstack-lab-rhsummit-2012/
> > 
> >  to set up OpenStack, Essex, on Fedora 17
> > 
> >  I'm stuck here:
> >  Now that an admin user has been created, that account can be used to
> >  administer keystone. To make it easy to set the admin user's
> >  credentials in the proper environment variables, create a
> >  keystonerc_admin file with the following contents ....
> >  http://fedorapeople.org/~russellb/openstack-lab-rhsummit-2012/ch02s02.html
> > 
> >  Where shall I create the file keystonerc_admin?  Where is the admin's
> >  directory?
>  
>  You can put it anywhere you like, note that the keystone admin user is not
>  necessarily tied to an individual system user (in which case the RC file
>  would naturally live in their home directory). Instead this is an openstack
>  identity that a system user assumes by sourcing the keystonerc_admin file.
>  It may be that a single system user sometimes adopts an admin role, and
>  other times uses openstack as a non-admin user. Or that a group of system
>  users share the role of openstack admin. Or whatever. Just put the file
>  somewhere that's only accessible to the system users that are allowed to
>  be admins.
>  
>  Note that there is an unrealistic aspect to this tutorial ... in practice
>  you may be more leary about leaving passwords in text files, in which
>  case the password can be re-typed for each individual command line or the
>  OS_PASSWORD env var set manually per-session. For the tutorial, its just
>  more convenient to dump it into a file.
>  
>  Cheers,
>  Eoghan
>

[Adam Young]

Those instructions assume you are working as a non-priveledge user on a 
system.   So,  if you are logged in as sliu,  you should put the 
keystonerc_* files in /home/sliu
If you ran as root, which some people do, you probably put them in /root




On 08/13/2012 07:01 AM, Stephen Liu wrote:
>  Hi Eoghan,
>
>  Further to my late posting.
>
>  I have stopped there and rebooted the PC.  Please advise where can I find admin's
> directory?  OR I have to start from the begining again?  Thank
>    
>
>  B.R.
>  SL
>
>
>  ----- Original Message -----
> > From: Eoghan Glynn <eglynn(a)redhat.com&gt;
> > To: Stephen Liu <satimis(a)yahoo.com>; Fedora Cloud SIG
> <cloud(a)lists.fedoraproject.org&gt;
> > Cc:
> > Sent: Monday, August 13, 2012 4:43 PM
> > Subject: Re: Where is the admin's directory?
> >
> >
> >
> >
> >>   I'm following;
> >>
> >>   Red Hat Essex Preview
> >>   Lab Guide
> >>   Red Hat Summit - 2012 Edition
> >>   http://fedorapeople.org/~russellb/openstack-lab-rhsummit-2012/
> >>
> >>   to set up OpenStack, Essex, on Fedora 17
> >>
> >>   I'm stuck here:
> >>   Now that an admin user has been created, that account can be used to
> >>   administer keystone. To make it easy to set the admin user's
> >>   credentials in the proper environment variables, create a
> >>   keystonerc_admin file with the following contents ....
> >>   http://fedorapeople.org/~russellb/openstack-lab-rhsummit-2012/ch02s02.html
> >>
> >>   Where shall I create the file keystonerc_admin?  Where is the admin's
> >>   directory?
> > You can put it anywhere you like, note that the keystone admin user is not
> > necessarily tied to an individual system user (in which case the RC file
> > would naturally live in their home directory). Instead this is an openstack
> > identity that a system user assumes by sourcing the keystonerc_admin file.
> > It may be that a single system user sometimes adopts an admin role, and
> > other times uses openstack as a non-admin user. Or that a group of system
> > users share the role of openstack admin. Or whatever. Just put the file
> > somewhere that's only accessible to the system users that are allowed to
> > be admins.
> >
> > Note that there is an unrealistic aspect to this tutorial ... in practice
> > you may be more leary about leaving passwords in text files, in which
> > case the password can be re-typed for each individual command line or the
> > OS_PASSWORD env var set manually per-session. For the tutorial, its just
> > more convenient to dump it into a file.
> >
> > Cheers,
> > Eoghan
> >
>  _______________________________________________
>  cloud mailing list
>  cloud(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/cloud

[Stephen Liu]

Hi Adam,




----- Original Message -----
>  From: Adam Young <ayoung(a)redhat.com&gt;
>  To: cloud(a)lists.fedoraproject.org
>  Cc: 
>  Sent: Monday, August 13, 2012 11:12 PM
>  Subject: Re: Where is the admin's directory?
>  
> T hose instructions assume you are working as a non-priveledge user on a 
>  system.   So,  if you are logged in as sliu,  you should put the 
>  keystonerc_* files in /home/sliu
>  If you ran as root, which some people do, you probably put them in /root 
Login    satimis

So I'll create the file on /home/satimis/

But I don't know whether I need to start from the beginning again.  As the PC has been
restarted several time?  

I finished up to;

2.2. Creating Users
http://fedorapeople.org/~russellb/openstack-lab-rhsummit-2012/ch02s02.html

$ keystone user-role-add --user 94d659c3c9534095aba5f8475c87091a \
  --role 78035c5d3cd94e62812d6d37551ecd6a \
  --tenant_id 6f8e3e36c4194b86b9a9b55d4b722af3

Thanks

B.R.
SL




>  
>  
>  
>  On 08/13/2012 07:01 AM, Stephen Liu wrote:
> >  Hi Eoghan,
> > 
> >  Further to my late posting.
> > 
> >  I have stopped there and rebooted the PC.  Please advise where can I find 
>  admin's directory?  OR I have to start from the begining again?  Thank
> >   
> > 
> >  B.R.
> >  SL
> > 
> > 
> >  ----- Original Message -----
> >>  From: Eoghan Glynn <eglynn(a)redhat.com&gt;
> >>  To: Stephen Liu <satimis(a)yahoo.com>; Fedora Cloud SIG 
>  <cloud(a)lists.fedoraproject.org&gt;
> >>  Cc:
> >>  Sent: Monday, August 13, 2012 4:43 PM
> >>  Subject: Re: Where is the admin's directory?
> >> 
> >> 
> >> 
> >> 
> >>>    I'm following;
> >>> 
> >>>    Red Hat Essex Preview
> >>>    Lab Guide
> >>>    Red Hat Summit - 2012 Edition
> >>>   http://fedorapeople.org/~russellb/openstack-lab-rhsummit-2012/
> >>> 
> >>>    to set up OpenStack, Essex, on Fedora 17
> >>> 
> >>>    I'm stuck here:
> >>>    Now that an admin user has been created, that account can be used 
>  to
> >>>    administer keystone. To make it easy to set the admin user's
> >>>    credentials in the proper environment variables, create a
> >>>    keystonerc_admin file with the following contents ....
> >>>   
>  http://fedorapeople.org/~russellb/openstack-lab-rhsummit-2012/ch02s02.html
> >>> 
> >>>    Where shall I create the file keystonerc_admin?  Where is the 
>  admin's
> >>>    directory?
> >>  You can put it anywhere you like, note that the keystone admin user is 
>  not
> >>  necessarily tied to an individual system user (in which case the RC 
>  file
> >>  would naturally live in their home directory). Instead this is an 
>  openstack
> >>  identity that a system user assumes by sourcing the keystonerc_admin 
>  file.
> >>  It may be that a single system user sometimes adopts an admin role, and
> >>  other times uses openstack as a non-admin user. Or that a group of 
>  system
> >>  users share the role of openstack admin. Or whatever. Just put the file
> >>  somewhere that's only accessible to the system users that are 
>  allowed to
> >>  be admins.
> >> 
> >>  Note that there is an unrealistic aspect to this tutorial ... in 
>  practice
> >>  you may be more leary about leaving passwords in text files, in which
> >>  case the password can be re-typed for each individual command line or 
>  the
> >>  OS_PASSWORD env var set manually per-session. For the tutorial, its 
>  just
> >>  more convenient to dump it into a file.
> >> 
> >>  Cheers,
> >>  Eoghan
> >> 
> >  _______________________________________________
> >  cloud mailing list
> >  cloud(a)lists.fedoraproject.org
> >  https://admin.fedoraproject.org/mailman/listinfo/cloud
>  
>  _______________________________________________
>  cloud mailing list
>  cloud(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/cloud
>

[Adam Young]

On 08/13/2012 12:22 PM, Stephen Liu wrote:
>  Hi Adam,
>
>
>
>
>  ----- Original Message -----
> > From: Adam Young <ayoung(a)redhat.com&gt;
> > To: cloud(a)lists.fedoraproject.org
> > Cc:
> > Sent: Monday, August 13, 2012 11:12 PM
> > Subject: Re: Where is the admin's directory?
> >
> > T hose instructions assume you are working as a non-priveledge user on a
> > system.   So,  if you are logged in as sliu,  you should put the
> > keystonerc_* files in /home/sliu
> > If you ran as root, which some people do, you probably put them in /root
>  Login    satimis
>
>  So I'll create the file on /home/satimis/
>
>  But I don't know whether I need to start from the beginning again.  As the PC has
> been restarted several time?
>
>  I finished up to;
>
>  2.2. Creating Users
>  http://fedorapeople.org/~russellb/openstack-lab-rhsummit-2012/ch02s02.html
>
>  $ keystone user-role-add --user 94d659c3c9534095aba5f8475c87091a \
>     --role 78035c5d3cd94e62812d6d37551ecd6a \
>     --tenant_id 6f8e3e36c4194b86b9a9b55d4b722af3 

If you have run the chkconfig step, then the service is set to run at 
machine startup time. To confirm

service openstack-keystone status

or ps -ef | grep keystone

should let you know if the Keystone service is running.  You also can run
. openstackrc_admin
keystone token-get


and, if you get a response, it is running.


>  Thanks
>
>  B.R.
>  SL
>
>
>
>
> >
> >
> > On 08/13/2012 07:01 AM, Stephen Liu wrote:
> >>   Hi Eoghan,
> >>
> >>   Further to my late posting.
> >>
> >>   I have stopped there and rebooted the PC.  Please advise where can I find
> > admin's directory?  OR I have to start from the begining again?  Thank
> >>    
> >>
> >>   B.R.
> >>   SL
> >>
> >>
> >>   ----- Original Message -----
> >>>   From: Eoghan Glynn <eglynn(a)redhat.com&gt;
> >>>   To: Stephen Liu <satimis(a)yahoo.com>; Fedora Cloud SIG
> > <cloud(a)lists.fedoraproject.org&gt;
> >>>   Cc:
> >>>   Sent: Monday, August 13, 2012 4:43 PM
> >>>   Subject: Re: Where is the admin's directory?
> >>>
> >>>
> >>>
> >>>
> >>>>     I'm following;
> >>>>
> >>>>     Red Hat Essex Preview
> >>>>     Lab Guide
> >>>>     Red Hat Summit - 2012 Edition
> >>>>    http://fedorapeople.org/~russellb/openstack-lab-rhsummit-2012/
> >>>>
> >>>>     to set up OpenStack, Essex, on Fedora 17
> >>>>
> >>>>     I'm stuck here:
> >>>>     Now that an admin user has been created, that account can be used
> > to
> >>>>     administer keystone. To make it easy to set the admin user's
> >>>>     credentials in the proper environment variables, create a
> >>>>     keystonerc_admin file with the following contents ....
> >>>>    
> > http://fedorapeople.org/~russellb/openstack-lab-rhsummit-2012/ch02s02.html
> >>>>     Where shall I create the file keystonerc_admin?  Where is the
> > admin's
> >>>>     directory?
> >>>   You can put it anywhere you like, note that the keystone admin user is
> > not
> >>>   necessarily tied to an individual system user (in which case the RC
> > file
> >>>   would naturally live in their home directory). Instead this is an
> > openstack
> >>>   identity that a system user assumes by sourcing the keystonerc_admin
> > file.
> >>>   It may be that a single system user sometimes adopts an admin role, and
> >>>   other times uses openstack as a non-admin user. Or that a group of
> > system
> >>>   users share the role of openstack admin. Or whatever. Just put the file
> >>>   somewhere that's only accessible to the system users that are
> > allowed to
> >>>   be admins.
> >>>
> >>>   Note that there is an unrealistic aspect to this tutorial ... in
> > practice
> >>>   you may be more leary about leaving passwords in text files, in which
> >>>   case the password can be re-typed for each individual command line or
> > the
> >>>   OS_PASSWORD env var set manually per-session. For the tutorial, its
> > just
> >>>   more convenient to dump it into a file.
> >>>
> >>>   Cheers,
> >>>   Eoghan
> >>>
> >>   _______________________________________________
> >>   cloud mailing list
> >>   cloud(a)lists.fedoraproject.org
> >>   https://admin.fedoraproject.org/mailman/listinfo/cloud
> > _______________________________________________
> > cloud mailing list
> > cloud(a)lists.fedoraproject.org
> > https://admin.fedoraproject.org/mailman/listinfo/cloud
> >
>  _______________________________________________
>  cloud mailing list
>  cloud(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/cloud

[Stephen Liu]

Hi,



- snip -

>  If you have run the chkconfig step, then the service is set to run at
>
>  machine startup time. To confirm
>  
>  service openstack-keystone status 
$ service openstack-keystone status
Redirecting to /bin/systemctl status  openstack-keystone.service
openstack-keystone.service - OpenStack Identity Service (code-named Keystone)
      Loaded: loaded (/usr/lib/systemd/system/openstack-keystone.service; enabled)
      Active: active (running) since Tue, 14 Aug 2012 17:59:25 +0800; 3min 35s ago
    Main PID: 775 (keystone-all)
      CGroup: name=systemd:/system/openstack-keystone.service
          └ 775 /usr/bin/python /usr/bin/keystone-all --config-fil...

Warning: Journal has been rotated since unit was started. Log output is incomplete or
unavailable.

So the service is running on booting up the PC.

What does the above "Warning" indicate?  Do I need to correct it?  If YES, pls
advise HOW?  TIA


>  or ps -ef | grep keystone
>  
>  should let you know if the Keystone service is running.   
$ ps -ef|grep keystone
keystone   775     1  0 17:59 ?        00:00:00 /usr/bin/python /usr/bin/keystone-all
--config-file /etc/keystone/keystone.conf
satimis   1764  1699  0 18:03 pts/0    00:00:00 grep --color=auto keystone


>  You also can run
>  . openstackrc_admin
>  keystone token-get
>  
>  and, if you get a response, it is running. 
Noted and thanks

B.R.
SL


> >>  On 08/13/2012 07:01 AM, Stephen Liu wrote:
> >>>    Hi Eoghan,
> >>> 
> >>>    Further to my late posting.
> >>> 
> >>>    I have stopped there and rebooted the PC.  Please advise where 
>  can I find
> >>  admin's directory?  OR I have to start from the begining again?  
>  Thank
> >>>     
> >>> 
> >>>    B.R.
> >>>    SL
> >>> 
> >>> 
> >>>    ----- Original Message -----
> >>>>    From: Eoghan Glynn <eglynn(a)redhat.com&gt;
> >>>>    To: Stephen Liu <satimis(a)yahoo.com>; Fedora Cloud SIG
> >>  <cloud(a)lists.fedoraproject.org&gt;
> >>>>    Cc:
> >>>>    Sent: Monday, August 13, 2012 4:43 PM
> >>>>    Subject: Re: Where is the admin's directory?
> >>>> 
> >>>> 
> >>>> 
> >>>> 
> >>>>>      I'm following;
> >>>>> 
> >>>>>      Red Hat Essex Preview
> >>>>>      Lab Guide
> >>>>>      Red Hat Summit - 2012 Edition
> >>>>>     
>  http://fedorapeople.org/~russellb/openstack-lab-rhsummit-2012/
> >>>>> 
> >>>>>      to set up OpenStack, Essex, on Fedora 17
> >>>>> 
> >>>>>      I'm stuck here:
> >>>>>      Now that an admin user has been created, that account 
>  can be used
> >>  to
> >>>>>      administer keystone. To make it easy to set the admin 
>  user's
> >>>>>      credentials in the proper environment variables, create 
>  a
> >>>>>      keystonerc_admin file with the following contents ....
> >>>>>     
> >> 
>  http://fedorapeople.org/~russellb/openstack-lab-rhsummit-2012/ch02s02.html
> >>>>>      Where shall I create the file keystonerc_admin?  Where 
>  is the
> >>  admin's
> >>>>>      directory?
> >>>>    You can put it anywhere you like, note that the keystone 
>  admin user is
> >>  not
> >>>>    necessarily tied to an individual system user (in which case 
>  the RC
> >>  file
> >>>>    would naturally live in their home directory). Instead this 
>  is an
> >>  openstack
> >>>>    identity that a system user assumes by sourcing the 
>  keystonerc_admin
> >>  file.
> >>>>    It may be that a single system user sometimes adopts an admin 
>  role, and
> >>>>    other times uses openstack as a non-admin user. Or that a 
>  group of
> >>  system
> >>>>    users share the role of openstack admin. Or whatever. Just 
>  put the file
> >>>>    somewhere that's only accessible to the system users that 
>  are
> >>  allowed to
> >>>>    be admins.
> >>>> 
> >>>>    Note that there is an unrealistic aspect to this tutorial ... 
>  in
> >>  practice
> >>>>    you may be more leary about leaving passwords in text files, 
>  in which
> >>>>    case the password can be re-typed for each individual command 
>  line or
> >>  the
> >>>>    OS_PASSWORD env var set manually per-session. For the 
>  tutorial, its
> >>  just
> >>>>    more convenient to dump it into a file.
> >>>> 
> >>>>    Cheers,
> >>>>    Eoghan
> >>>> 
> >>>    _______________________________________________
> >>>    cloud mailing list
> >>>   cloud(a)lists.fedoraproject.org
> >>>   https://admin.fedoraproject.org/mailman/listinfo/cloud
> >>  _______________________________________________
> >>  cloud mailing list
> >>  cloud(a)lists.fedoraproject.org
> >>  https://admin.fedoraproject.org/mailman/listinfo/cloud
> >> 
> >  _______________________________________________
> >  cloud mailing list
> >  cloud(a)lists.fedoraproject.org
> >  https://admin.fedoraproject.org/mailman/listinfo/cloud
>  
>  _______________________________________________
>  cloud mailing list
>  cloud(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/cloud
>