Chapter 4. Keystone Identity Service
In this chapter, we will cover the following:
- Configuring Keystone with the MariaDB backend
- Generating and configuring tokens PKIs
- Configuring Keystone with Microsoft Active Directory and LDAP
- Configuring Keystone caching with Memcached
- Securing Keystone with SSL
Introduction
Keystone is an OpenStack project that provides Identity as a service to OpenStack services and components. Keystone is responsible for authenticating users and services, and authorizing access to OpenStack components.
Keystone also provides a service catalog that users and other services can query to discover the services OpenStack provides. For each service, Keystone Catalog returns an endpoint that is a network-accessible URL from where users ...
Get Production Ready OpenStack - Recipes for Successful Environments now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.