Domain-specific configuration file

Any options that you define in the domain-specific configuration file override options in the /etc/keystone/keystone.conf configuration file.

Domains configured for the service user or project use the Identity API v3 to retrieve the service token.

To configure the domain for the service user, set the following options in the [DEFAULT] section of the /etc/keystone/domains/keystone.DOMAIN_NAME.conf file:

admin_user_domain_id = USER_DOMAIN_ID
admin_user_domain_name = USER_DOMAIN_NAME

Replace USER_DOMAIN_ID with the Identity service account user domain ID, and USER_DOMAIN_NAME with the Identity service account user domain name.

To configure the domain for the project, set the following options in the [DEFAULT] section of the /etc/keystone/domains/keystone.DOMAIN_NAME.conf file:

admin_project_domain_id = PROJECT_DOMAIN_ID
admin_project_domain_name = PROJECT_DOMAIN_NAME

Replace PROJECT_DOMAIN_ID with the Identity service account project domain ID, and PROJECT_DOMAIN_NAME with the Identity service account project domain name.