No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

HUAWEI CLOUD Stack 6.5.0 Troubleshooting Guide 02

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Common Operations

Common Operations

Technical Support

Huawei Technologies Co., Ltd. provides customers with all-round technical support and services. If you encounter any problem during product use or maintenance, you can obtain information that can help you locate or solve your problem through the following channels:

If the problem still is not solved, you can contact our local Huawei representative office or the company's headquarters.

Importing Environment Variables

After the FusionSphere OpenStack system is deployed, the authentication mode is enabled by default. You need to manually import environment variables before executing CPS and OpenStack commands. The system provides the script used for importing environment variables.

Prerequisites
  • The first FusionSphere OpenStack host has been installed.
  • You have logged in to the host as user root.
Procedure
  1. Run the following command to import environment variables:

    source set_env

    Information similar to the following is displayed:

    please choose environment variable which you want to import: 
    (1) openstack environment variable (keystone v3) 
    (2) cps environment variable 
    (3) openstack environment variable legacy (keystone v2) 
    (4) openstack environment variable of cloud_admin (keystone v3) 
    please choose:[1|2|3|4]      

  2. Select an authentication mode.

    Four authentication modes are available: Keystone V3 authentication with the built-in DC administrator, CPS authentication, Keystone V2 authentication, and Keystone V3 authentication with the built-in cloud administrator. You need to select a mode based on the following descriptions:

    • To enable Keystone V3 authentication with the built-in DC administrator, enter 1, press Enter, and enter the password of OS_USERNAME as instructed.

      The default password is FusionSphere123.

      The environment variables are successfully imported if the command outputs of cps host-list and nova list are automatically displayed. After the environment variables are imported, the system uses the built-in DC administrator's Keystone V3 to authenticate requests. CPS and OpenStack commands can be executed.

      In the Mitaka release of OpenStack, Keystone command line interfaces (CLIs) are normalized and encrypted as OpenStack commands. When the Identity service is registered as a V3 path, the original Keystone tenant/role/service commands cannot be executed due to compatibility issues. Preferentially use Keystone V3 for authentication and use OpenStack project/role/service commands with equivalent functions.

    • To enable CPS authentication, enter 2, press Enter, and enter the username and password of CPS_USERNAME as prompted.

      The username is cps_admin and the default password is FusionSphere123.

      The environment variables are successfully imported if the command output of cps host-list is automatically displayed. After the environment variables are imported, the system uses CPS to authenticate requests, and you can run only CPS commands. The system automatically runs nova list after environment variables are imported. Therefore, the "ERROR..." message is displayed in the command output.

      CPS authentication is recommended only when the FusionSphere OpenStack deployment is incomplete, OpenStack authentication is unavailable, or an exception has occurred in Keystone authentication.

    • To enable Keystone V2 authentication, enter 3, press Enter, and enter the password of OS_USERNAME as prompted.

      The default password is FusionSphere123.

      The environment variables are successfully imported if the command outputs of cps host-list and nova list are automatically displayed. After environment variables are successfully imported, the system uses Keystone V2 to authenticate requests. CPS and OpenStack commands can be executed.

      Keystone V2 authentication is still supported to enable compatibility with earlier versions, but Keystone V3 authentication is recommended.

    • If Keystone V3 of the built-in cloud administrator is used for authentication, enter 4, press Enter, and enter the password of cloud_admin (the built-in cloud administrator) as prompted.

      The default password is FusionSphere123.

      The environment variables are successfully imported if the command outputs of cps host-list and nova list are automatically displayed. After the environment variables are imported, the system uses the built-in cloud administrator's Keystone V3 to authenticate requests. CPS and OpenStack commands can be executed.

    NOTE:
    • If Service OM or ManageOne is connected, use the Keystone V3 authentication mode.
    • If the operations must be performed using the cloud_admin account rights (for example, run the PasswordManager command to reset the GaussDB database account and its password), use the built-in cloud administrator's OpenStack Keystone V3 authentication.
    • If you select Keystone authentication when importing environment variables, the command output of cps host-list is normal but that of nova list is abnormal because nova-api has not been deployed. After deploying nova-api, you can run Nova commands.

  3. In multi-DC scenarios, if each DC has an independent Glance service deployed, run the following command to import OS_IMAGE_URL when importing environment variables for each DC:

    export OS_IMAGE_URL=https://image.az.dc.domainname.com:443

    az.dc.domainname.com:443 is the Glance domain name configured for a DC.

Using PuTTY to Log In to a Node in Key Pair Authentication Mode

If Secure Shell (SSH) security hardening is performed on nodes in the system, SSH-based password authentication is disabled for logins. In this case, use PuTTY and the required private key to log in to a target node.

Prerequisites
  • SSH security hardening has been performed on the target node. Security hardening measures include:
    • SSH key pair authentication mode has been enabled and the public key certificate has been configured on the node.
    • SSH password authentication has been disabled.
  • You have obtained the private key certificate that matches the public key certificate. If the private key certificate is encrypted, you also need to obtain the password of the private key certificate.

    To obtain the default private key certificate, perform the following:

    Visit http://support.huawei.com and log in to the system. Enter FusionSphere default public and private keys in the search box in the upper-right corner of the web page. Click the first result to obtain the default public and private key certificate.

Procedure
  1. Check whether PuTTY on the local PC has been used to log in to a node in key pair authentication mode.

    • If yes, go to 7.
    • If no or you cannot confirm, go to 2.

  2. Run PuTTY and enter the IP address of the target node and the SSH port number (default value: 22).
  3. In the Category area in the left pane, choose Connection > SSH > Auth.

    The SSH authentication configuration page is displayed.

  4. Click Browse, select the prepared private key certificate in the displayed window, and click Open.

    The file name extension of the private key certificate is *.ppk. The default private key certificate is id_rsa.ppk, which can be obtained from the version release path.

    The following figure shows the SSH authentication configuration page.

    Figure 8-12 Configuring the private key certificate

  5. In the Category area in the left pane, select Session.

    The main page is displayed.

  6. To facilitate subsequent access, create a custom session in Saved Sessions and click Save.

    The following figure shows the session configuration page.

    Figure 8-13 Saving a session

    After this step, go to 8.

  7. Select a saved session and click Load.
  8. Click Open.
  9. Enter the username for logging in to the target node as prompted.

    If the in-use private key certificate is encrypted, you also need to enter its password.

    The default private key certificate is encrypted. The default password is Huawei@CLOUD8!.

Logging In to and Logging Out of Service OM

Perform the steps in this section to log in to the Service OM web client so that you can perform necessary management operations on it.

Prerequisites
  • The required resolution has been set on the local PC. Recommended resolutions are 1366 x 768 and 1440 x 900. To ensure optimal user experience, use a horizontal resolution that is greater than or equal to 1280p.
  • You have obtained the IP address of ManageOne Maintenance Portal.
  • You have obtained the username and password for logging in to ManageOne Maintenance Portal.
Logging in to Service OM
  1. Log in to ManageOne Maintenance Portal using a browser.

    • URL: https://Address for accessing the homepage of ManageOne Maintenance Portal:31943, for example, https://oc.type.com:31943
    • Default username: admin; default password: Huawei12#$

  1. In the navigation bar on ManageOne, choose O&M Maps. The O&M Maps page is displayed.
  2. In the Quick Links navigation bar on the right of the O&M Maps page, click Service OM. Select your region and then access the Service OM page.
Logout

In the upper right corner of the web client, click the username and choose Log Out. Then, you are switched to the login page.

Logging In to the FusionSphere OpenStack Web Client (ManageOne Mode)

Region Type I
  1. Log in to ManageOne Maintenance Portal using a browser.

    • URL: https://Address for accessing the homepage of ManageOne Maintenance Portal:31943, for example, https://oc.type.com:31943
    • Default username: admin; default password: Huawei12#$

  1. In the navigation bar on ManageOne, choose O&M Maps. The O&M Maps page is displayed.
  2. In the Quick Links navigation bar on the right of the O&M Maps page, click FusionSphere CPS (Cascading) to log in to the web client of the cascading FusionSphere OpenStack system.
  3. In the Quick Links navigation bar on the right of the O&M Maps page, click FusionSphere CPS (Cascaded) to log in to the web client of the cascaded FusionSphere OpenStack system.
Region Type II
  1. Log in to ManageOne Maintenance Portal using a browser.

    • URL: https://Address for accessing the homepage of ManageOne Maintenance Portal:31943, for example, https://oc.type.com:31943
    • Default username: admin; default password: Huawei12#$

  2. In the navigation bar on ManageOne, choose O&M Maps. The O&M Maps page is displayed.
  3. In the Quick Links navigation bar on the right of the O&M Maps page, click FusionSphere CPS to log in to the FusionSphere OpenStack web client.
Region Type III
  1. Log in to ManageOne Maintenance Portal using a browser.

    • URL: https://Address for accessing the homepage of ManageOne Maintenance Portal:31943, for example, https://oc.type.com:31943
    • Default username: admin; default password: Huawei12#$

  2. In the navigation bar on ManageOne, choose O&M Maps. The O&M Maps page is displayed.
  3. In the Quick Links navigation bar on the right of the O&M Maps page, click FusionSphere CPS to log in to the FusionSphere OpenStack web client.

Translation
Download
Updated: 2019-06-01

Document ID: EDOC1100062375

Views: 3994

Downloads: 20

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next