Migrating from Legacy Authentication

Migration of users, projects (aka tenants), roles and EC2 credentials is supported for the Diablo and Essex releases of Nova. To migrate your auth data from Compute, use the following steps:

Step 1: Export your data from Compute

Use the following command to export your data from Compute (nova):

nova-manage export auth > /path/to/dump

It is important to redirect the output to a file so it can be imported in a later step.

Step 2: db_sync your new, empty database

Run the following command to configure the most recent schema in your new installation:

keystone-manage db_sync

Step 3: Import your data to Keystone

To import your Compute auth data from a dump file created with nova-manage, run this command:

$ keystone-manage import_nova_auth [dump_file, e.g. /path/to/dump]

Legal notices