@@ -178,6 +178,13 @@ function configure_keystone {

         iniset $KEYSTONE_CONF assignment driver "keystone.assignment.backends.$KEYSTONE_ASSIGNMENT_BACKEND.Assignment"

     fi

+    # Configure rabbitmq credentials

+    if is_service_enabled rabbit; then

+        iniset $KEYSTONE_CONF DEFAULT rabbit_userid $RABBIT_USERID

+        iniset $KEYSTONE_CONF DEFAULT rabbit_password $RABBIT_PASSWORD

+        iniset $KEYSTONE_CONF DEFAULT rabbit_host $RABBIT_HOST

+    fi

+

     # Set the URL advertised in the ``versions`` structure returned by the '/' route

     iniset $KEYSTONE_CONF DEFAULT public_endpoint "$KEYSTONE_SERVICE_PROTOCOL://$KEYSTONE_SERVICE_HOST:%(public_port)s/"

     iniset $KEYSTONE_CONF DEFAULT admin_endpoint "$KEYSTONE_SERVICE_PROTOCOL://$KEYSTONE_SERVICE_HOST:%(admin_port)s/"

@@ -591,8 +591,8 @@ function init_nova_cells {

         fi

         $NOVA_BIN_DIR/nova-manage --config-file $NOVA_CELLS_CONF db sync

-        $NOVA_BIN_DIR/nova-manage --config-file $NOVA_CELLS_CONF cell create --name=region --cell_type=parent --username=guest --hostname=$RABBIT_HOST --port=5672 --password=$RABBIT_PASSWORD --virtual_host=/ --woffset=0 --wscale=1

-        $NOVA_BIN_DIR/nova-manage cell create --name=child --cell_type=child --username=guest --hostname=$RABBIT_HOST --port=5672 --password=$RABBIT_PASSWORD --virtual_host=child_cell --woffset=0 --wscale=1

+        $NOVA_BIN_DIR/nova-manage --config-file $NOVA_CELLS_CONF cell create --name=region --cell_type=parent --username=$RABBIT_USERID --hostname=$RABBIT_HOST --port=5672 --password=$RABBIT_PASSWORD --virtual_host=/ --woffset=0 --wscale=1

+        $NOVA_BIN_DIR/nova-manage cell create --name=child --cell_type=child --username=$RABBIT_USERID --hostname=$RABBIT_HOST --port=5672 --password=$RABBIT_PASSWORD --virtual_host=child_cell --woffset=0 --wscale=1

     fi

 }

@@ -5,7 +5,7 @@

 # Dependencies:

 #

 # - ``functions`` file

-# - ``RABBIT_{HOST|PASSWORD}`` must be defined when RabbitMQ is used

+# - ``RABBIT_{HOST|PASSWORD|USERID}`` must be defined when RabbitMQ is used

 # ``stack.sh`` calls the entry points in this order:

 #

@@ -63,6 +63,9 @@ function check_rpc_backend {

 function cleanup_rpc_backend {

     if is_service_enabled rabbit; then

         # Obliterate rabbitmq-server

+        if [ -n "$RABBIT_USERID" ]; then

+            sudo rabbitmqctl delete_user "$RABBIT_USERID"

+        fi

         uninstall_package rabbitmq-server

         sudo killall epmd || sudo killall -9 epmd

         if is_ubuntu; then

@@ -147,15 +150,16 @@ function restart_rpc_backend {

                 # service is not started by default

                 restart_service rabbitmq-server

             fi

+            rabbit_setuser "$RABBIT_USERID" "$RABBIT_PASSWORD"

             # change the rabbit password since the default is "guest"

-            sudo rabbitmqctl change_password guest $RABBIT_PASSWORD && break

+            sudo rabbitmqctl change_password $RABBIT_USERID $RABBIT_PASSWORD && break

             [[ $i -eq "10" ]] && die $LINENO "Failed to set rabbitmq password"

         done

         if is_service_enabled n-cell; then

             # Add partitioned access for the child cell

             if [ -z `sudo rabbitmqctl list_vhosts | grep child_cell` ]; then

                 sudo rabbitmqctl add_vhost child_cell

-                sudo rabbitmqctl set_permissions -p child_cell guest ".*" ".*" ".*"

+                sudo rabbitmqctl set_permissions -p child_cell $RABBIT_USERID ".*" ".*" ".*"

             fi

         fi

     elif is_service_enabled qpid; then

@@ -188,6 +192,7 @@ function iniset_rpc_backend {

         iniset $file $section rpc_backend ${package}.openstack.common.rpc.impl_kombu

         iniset $file $section rabbit_hosts $RABBIT_HOST

         iniset $file $section rabbit_password $RABBIT_PASSWORD

+        iniset $file $section rabbit_userid $RABBIT_USERID

     fi

 }

@@ -202,6 +207,21 @@ function qpid_is_supported {

     ( ! is_suse )

 }

+function rabbit_setuser {

+    local user="$1" pass="$2" found="" out=""

+    out=$(sudo rabbitmqctl list_users) ||

+        { echo "failed to list users" 1>&2; return 1; }

+    found=$(echo "$out" | awk '$1 == user { print $1 }' "user=$user")

+    if [ "$found" = "$user" ]; then

+        sudo rabbitmqctl change_password "$user" "$pass" ||

+            { echo "failed changing pass for '$user'" 1>&2; return 1; }

+    else

+        sudo rabbitmqctl add_user "$user" "$pass" ||

+            { echo "failed changing pass for $user"; return 1; }

+    fi

+    sudo rabbitmqctl set_permissions "$user" ".*" ".*" ".*"

+}

+

 # Restore xtrace

 $XTRACE

@@ -141,6 +141,7 @@ function configure_trove {

     rm -f $TROVE_CONF_DIR/trove-taskmanager.conf

     rm -f $TROVE_CONF_DIR/trove-conductor.conf

+    iniset $TROVE_CONF_DIR/trove.conf DEFAULT rabbit_userid $RABBIT_USERID

     iniset $TROVE_CONF_DIR/trove.conf DEFAULT rabbit_password $RABBIT_PASSWORD

     iniset $TROVE_CONF_DIR/trove.conf DEFAULT sql_connection `database_connection_url trove`

     iniset $TROVE_CONF_DIR/trove.conf DEFAULT add_addresses True

@@ -148,6 +149,7 @@ function configure_trove {

     iniset $TROVE_CONF_DIR/trove.conf DEFAULT cinder_url $CINDER_SERVICE_PROTOCOL://$CINDER_SERVICE_HOST:$CINDER_SERVICE_PORT/v1

     iniset $TROVE_CONF_DIR/trove.conf DEFAULT swift_url http://$SERVICE_HOST:8080/v1/AUTH_

+    iniset $TROVE_LOCAL_CONF_DIR/trove-guestagent.conf.sample DEFAULT rabbit_userid $RABBIT_USERID

     iniset $TROVE_LOCAL_CONF_DIR/trove-guestagent.conf.sample DEFAULT rabbit_password $RABBIT_PASSWORD

     sed -i "s/localhost/$NETWORK_GATEWAY/g" $TROVE_LOCAL_CONF_DIR/trove-guestagent.conf.sample

@@ -158,6 +160,7 @@ function configure_trove {

     if is_service_enabled tr-tmgr; then

         TROVE_AUTH_ENDPOINT=$KEYSTONE_AUTH_PROTOCOL://$KEYSTONE_AUTH_HOST:$KEYSTONE_AUTH_PORT//v$IDENTITY_API_VERSION

+        iniset $TROVE_CONF_DIR/trove-taskmanager.conf DEFAULT rabbit_userid $RABBIT_USERID

         iniset $TROVE_CONF_DIR/trove-taskmanager.conf DEFAULT rabbit_password $RABBIT_PASSWORD

         iniset $TROVE_CONF_DIR/trove-taskmanager.conf DEFAULT sql_connection `database_connection_url trove`

         iniset $TROVE_CONF_DIR/trove-taskmanager.conf DEFAULT taskmanager_manager trove.taskmanager.manager.Manager

@@ -173,6 +176,7 @@ function configure_trove {

     # (Re)create trove conductor conf file if needed

     if is_service_enabled tr-cond; then

+        iniset $TROVE_CONF_DIR/trove-conductor.conf DEFAULT rabbit_userid $RABBIT_USERID

         iniset $TROVE_CONF_DIR/trove-conductor.conf DEFAULT rabbit_password $RABBIT_PASSWORD

         iniset $TROVE_CONF_DIR/trove-conductor.conf DEFAULT sql_connection `database_connection_url trove`

         iniset $TROVE_CONF_DIR/trove-conductor.conf DEFAULT nova_proxy_admin_user radmin

@@ -429,6 +429,7 @@ initialize_database_backends && echo "Using $DATABASE_TYPE database backend" ||

 # Rabbit connection info

 if is_service_enabled rabbit; then

+    RABBIT_USERID=${RABBIT_USERID:-stackrabbit}

     RABBIT_HOST=${RABBIT_HOST:-$SERVICE_HOST}

     read_password RABBIT_PASSWORD "ENTER A PASSWORD TO USE FOR RABBIT."

 fi