Install and configure in keystone

[Assassins!]

- [x] I have a fix to the document that I can paste below including example: input and output.

When setting up mysql before installing and configuring identity service, the commands listed in the documentation is for <=mysql8.x which is

GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' \
IDENTIFIED BY 'KEYSTONE_DBPASS';

GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' \
IDENTIFIED BY 'KEYSTONE_DBPASS';

But in the latest release of mysql(for example 15.x) this should be done in two separate steps

First, create users
[mysql]>CREATE USER 'keystone'@'localhost' IDENTIFIED BY 'mysql';
[mysql]> CREATE USER 'keystone'@'%' IDENTIFIED BY 'mysql';

Second, grant permissions
[mysql]> GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost';
[mysql]> GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%';

If you have a troubleshooting or support issue, use the following resources:

 - Ask OpenStack: http://ask.openstack.org
 - The mailing list: http://lists.openstack.org
 - IRC: 'openstack' channel on Freenode

-----------------------------------
Release: on 2019-09-18 18:54:05
SHA: 3d26cffc2393ae0270b5d073397ffaccc7dde20b
Source: https://opendev.org/openstack/keystone/src/doc/source/install/keystone-install-ubuntu.rst
URL: https://docs.openstack.org/keystone/latest/install/keystone-install-ubuntu.html

[Vishakha Agarwal (vishakha.agarwal)]

Could you please share the mysql doc link detailing about the change you mentioned ?

[Assassins! (shoaibfrasmd)]

https://dev.mysql.com/doc/refman/8.0/en/grant.html

 *A database administrator first uses CREATE USER
<https://dev.mysql.com/doc/refman/8.0/en/create-user.html> to create an
account and define its nonprivilege characteristics such as its password,
whether it uses secure connections, and limits on access to server
resources, then uses GRANT
<https://dev.mysql.com/doc/refman/8.0/en/grant.html> to define its
privileges. ALTER USER
<https://dev.mysql.com/doc/refman/8.0/en/alter-user.html> may be used to
change the nonprivilege characteristics of existing accounts. For example:*

*CREATE USER 'jeffrey'@'localhost' IDENTIFIED BY 'password';
GRANT ALL ON db1.* TO 'jeffrey'@'localhost';*

On Mon, Feb 17, 2020 at 3:31 PM Vishakha Agarwal <email address hidden>
wrote:

> Could you please share the mysql doc link detailing about the change you
> mentioned ?
>
> ** Changed in: keystone
> Status: New => Incomplete
>
> --
> You received this bug notification because you are subscribed to the bug
> report.
> https://bugs.launchpad.net/bugs/1863098
>
> Title:
> Install and configure in keystone
>
> Status in OpenStack Identity (keystone):
> Incomplete
>
> Bug description:
> - [x] I have a fix to the document that I can paste below including
> example: input and output.
>
> When setting up mysql before installing and configuring identity
> service, the commands listed in the documentation is for <=mysql8.x
> which is
>
> GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' \
> IDENTIFIED BY 'KEYSTONE_DBPASS';
>
> GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' \
> IDENTIFIED BY 'KEYSTONE_DBPASS';
>
> But in the latest release of mysql(for example 15.x) this should be
> done in two separate steps
>
> First, create users
> [mysql]>CREATE USER 'keystone'@'localhost' IDENTIFIED BY 'mysql';
> [mysql]> CREATE USER 'keystone'@'%' IDENTIFIED BY 'mysql';
>
> Second, grant permissions
> [mysql]> GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost';
> [mysql]> GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%';
>
>
> If you have a troubleshooting or support issue, use the following
> resources:
>
> - Ask OpenStack: http://ask.openstack.org
> - The mailing list: http://lists.openstack.org
> - IRC: 'openstack' channel on Freenode
>
> -----------------------------------
> Release: on 2019-09-18 18:54:05
> SHA: 3d26cffc2393ae0270b5d073397ffaccc7dde20b
> Source:
> https://opendev.org/openstack/keystone/src/doc/source/install/keystone-install-ubuntu.rst
> URL:
> https://docs.openstack.org/keystone/latest/install/keystone-install-ubuntu.html
>
> To manage notifications about this bug go to:
> https://bugs.launchpad.net/keystone/+bug/1863098/+subscriptions
>

--

¤€z!α¤

[Colleen Murphy (krinkle)]

The current instructions work fine for me:

$ mysql --version
mysql Ver 15.1 Distrib 10.1.44-MariaDB, for debian-linux-gnu (x86_64) using readline 5.2

MariaDB [(none)]> create database keystone;
Query OK, 1 row affected (0.00 sec)

MariaDB [(none)]> GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' \
    -> IDENTIFIED BY 'KEYSTONE_DBPASS';
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' \
    -> IDENTIFIED BY 'KEYSTONE_DBPASS';
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> select host, user from mysql.user;
+-----------+----------+
| host | user |
+-----------+----------+
| % | keystone |
| localhost | keystone |
| localhost | root |
+-----------+----------+
3 rows in set (0.00 sec)

Can you share the specific errors or issues you are seeing with the current instructions?

[Launchpad Janitor (janitor)]

[Expired for OpenStack Identity (keystone) because there has been no activity for 60 days.]