Deleting domains
Keystone domains can be deleted if there are no users associated with them. If there are any users associated with the domain when trying to delete it, an error will be shown. In this example, we will show how to delete a domain that is no longer being used, called olddomain
.
Getting ready
Ensure that you are logged on to a correctly configured OpenStack client and can access the OpenStack environment as a user with admin privileges.
Refer to Chapter 2, The OpenStack Client, for details of setting up your environment to use OpenStack command-line client.
How to do it…
In order to delete a domain, execute the following commands:
Get the domain's name from a current domain list:
Verify that there are no users associated with the
olddomain
domain that we will be deleting:openstack user list --domain olddomain
This list should be empty before proceeding. If it is not, delete all the users before proceeding to the next step.
Disable the domain:
openstack domain set --disable olddomain...