I can just say Thanks a Zillion mate, this was the guide I was looking for, although I did some customization because I put it on a domain as your guide said, because OpenStack doesn't advise to backedn the whole system on LDAP, so my DGHVOIP domain is working LDAP'ed and the Default one uses SQL backend.

I didn't do the Apache stuff, because I don't wanna break my setup just yet, so I took the best bits from your excellent guide and *finally* made it work.

You kerberized the whole gizmo but if anyone wants to do it it domain-aware, bear in mind that you can't use v2 API, also you've got to use the ids of the users, groups and projects, otherwise keystone will silently exit and you'll lose a lot of patience and hair.

Thanks

Hi,

thanks for the guide. It does not work for me, even using the juno release.

In part 6, when I try to create the roles with:
keystone user-role-add --user nova --role admin --tenant services

I get "Expecting an auth URL via either --os-auth-url or env[OS_AUTH_URL]"

At first I thought there was a typo in your explanation, and that I should:
export OS_SERVICE_ENDPOINT=http://localhost:35357/v2.0
export OS_SERVICE_TOKEN=$CONFIG_KEYSTONE_ADMIN_TOKEN

But then I get:
Internal Server Error (HTTP 500)

Do you have any idea on what might be happening?

Regards