Keystone configuration

Question

For several days I've been struggling with configuring keystone. When I try to create a tenant for an administrative user and a tenant for other OpenStack services:

 $ keystone tenant-create --name=admin --description="Admin Tenant"
 $ keystone tenant-create --name=service --description="Service Tenant"

I get the following:

Unable to establish connection to http://controller:35357/v2.0/tenants

Answer 1

Errors like this usually mean that services registered in keystone used a hostname which may not be known to the client. Since you are clearly connecting to the keystone server, you can add a mapping in your hosts file, mapping the name 'controller' to the keystone server's Address.

The error indicates a straightforward connection error. Can you successfully resolve the address of 'Controller'? Can you ping 'controller'? Can you establish a TCP connection to 'controller' on port 35357?

The answer to the last question should be No. There may be a firewall blocking the connection to the remote machine. Disable any firewalls on your client machine and check for a network firewall.