The Identity configuration file is an 'ini' file format with
sections, extended from
Paste, a common
system used to configure python WSGI based applications. In
addition to the paste config entries, general configuration values
are stored under [DEFAULT],
[sql], [ec2] and then
drivers for the various services are included under their
individual sections.
The services include:
[identity]- the python module that backends the identity system[catalog]- the python module that backends the service catalog[token]- the python module that backends the token providing mechanisms[policy]- the python module that drives the policy system for RBAC
The configuration file is expected to be named
keystone.conf. When starting up Identity, you
can specify a different configuration file to use with
--config-file. If you do
not specify a configuration
file, keystone will look in the following directories for a
configuration file, in order:
~/.keystone~//etc/keystone/etc
Logging is configured externally to the rest of Identity, the file
specifying the logging configuration is in the [DEFAULT]
section
of the keystone conf file under log_config. If
you wish to route all your logging through syslog, set
use_syslog=true option in the
[DEFAULT] section.
A sample logging file is available with the project in the
directory etc/logging.conf.sample. Like other
OpenStack projects, Identity uses the `python logging module`,
which includes extensive configuration options for choosing the
output levels and formats.
In addition to this documentation page, you can check the
etc/keystone.conf sample configuration files
distributed with keystone for example configuration files for each
server application.
