Skip to content

Commit eceebfa

Browse files
committed
docs: Add tip about creating the creator role
The default example mapping includes the "creator" role, but it does not exist by default after completing most of the OpenStack setup. To avoid errors when logging in with a valid Rackspace username/password, manually create the "creator" role. Without it, Keystone will return the following error: ERROR keystone.auth.plugins.mapped [None-4e390453-680f-4a5d-a315-2a0ac7693033 - - - - - -] Role creator was specified in the mapping but does not exist. All roles specified in a mapping must exist before assignment.
1 parent f330dbb commit eceebfa

File tree

1 file changed

+10
-0
lines changed

1 file changed

+10
-0
lines changed

docs/openstack-keystone-federation.md

+10
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,16 @@ You're also welcome to generate your own mapping to suit your needs; however, if
2424

2525
The example mapping **JSON** file can be found within the genestack repository at `/opt/genestack/etc/keystone/mapping.json`.
2626

27+
!!! tip "Creating the `creator` role"
28+
29+
The creator role does not exist by default, but is included in the example
30+
mapping. One must create the creator role in order to prevent authentication
31+
errors if using the mapping "as is".
32+
33+
``` shell
34+
openstack --os-cloud default role create creator
35+
```
36+
2737
## Now register the mapping within Keystone
2838

2939
``` shell

0 commit comments

Comments
 (0)