在CentOS 7上部署OpenStack Juno时遇到的问题总结

http://www.justfbt.com/

ISSUES:

1, can not start openstack-keystone service:

[root@controller01 ~]# systemctl start openstack-keystone
Job for openstack-keystone.service failed. See 'systemctl status openstack-keystone.service' and 'journalctl -xn' for details.

[root@controller01 ~]# systemctl status openstack-keystone
openstack-keystone.service - OpenStack Identity Service (code-named Keystone)
Loaded: loaded (/usr/lib/systemd/system/openstack-keystone.service; enabled)
Active: failed (Result: start-limit) since Fri 2015-05-22 09:54:23 EDT; 18s ago
Process: 25587 ExecStart=/usr/bin/keystone-all (code=exited, status=1/FAILURE)
Main PID: 25587 (code=exited, status=1/FAILURE)
May 22 09:54:23 controller01 systemd[1]: openstack-keystone.service: main process exited, code=exited, status=1/FAILURE
May 22 09:54:23 controller01 systemd[1]: Failed to start OpenStack Identity Service (code-named Keystone).
May 22 09:54:23 controller01 systemd[1]: Unit openstack-keystone.service entered failed state.
May 22 09:54:23 controller01 systemd[1]: openstack-keystone.service holdoff time over, scheduling restart.
May 22 09:54:23 controller01 systemd[1]: Stopping OpenStack Identity Service (code-named Keystone)...
May 22 09:54:23 controller01 systemd[1]: Starting OpenStack Identity Service (code-named Keystone)...
May 22 09:54:23 controller01 systemd[1]: openstack-keystone.service start request repeated too quickly, refusing to start.
May 22 09:54:23 controller01 systemd[1]: Failed to start OpenStack Identity Service (code-named Keystone).
May 22 09:54:23 controller01 systemd[1]: Unit openstack-keystone.service entered failed state.

# chown -R keystone:keystone /var/log/keystone
# chown -R keystone:keystone /etc/keystone/ssl

2, can not: run keystone user-list … （keyston correlation commands):

# keystone tenant-create --name demo --description "Demo Tenant"
An unexpected error prevented the server from fulfilling your request. (HTTP 500)
# less /var/log/keystone/keystone.log
2015-05-20 02:02:38.766 16464 TRACE keystone.common.wsgi  Is the server running on host "controller01" (127.0.0.1) and accepting
2015-05-20 02:02:38.766 16464 TRACE keystone.common.wsgi  TCP/IP connections on port 5432?
2015-05-20 02:02:38.766 16464 TRACE keystone.common.wsgi could not connect to server: Permission denied
2015-05-20 02:02:38.766 16464 TRACE keystone.common.wsgi  Is the server running on host "controller01" (192.168.222.43) and accepting
2015-05-20 02:02:38.766 16464 TRACE keystone.common.wsgi  TCP/IP connections on port 5432?
2015-05-20 02:02:38.766 16464 TRACE keystone.common.wsgi  None None
2015-05-20 02:02:38.766 16464 TRACE keystone.common.wsgi

check /etc/hosts,verify this line:
127.0.0.1   localhost

check iptables

check selinux