Hi Diego! I did not reinstall OpenStack components or Compute Node... It was a fresh install, that I started using into production.
I already did this before, I mean, reinstall things without formatting the server but, I always remove all the remaining instances, with virt-manager, before starting it over again, but not this time. This security breach is happening right now here and I don't know what can I do to fix it, or what should I type on a BUG at Launchpad... *This problem is very serious*, mostly because "Tenant A" can't see its own instances, so, he is unable to use the OpenStack anymore and, "Tenant B" isn't aware that someone else is accessing its Instances without his permission. I'm sure that this problem is worth to take a look by someone more expert than I. Tks! Thiago On 23 December 2013 18:12, Diego Parrilla Santamaría < diego.parrilla.santama...@gmail.com> wrote: > Did you reinstall your system? If so, are you sure you deleted the > previous running VMs in the compute server? > > I have seen this before when trying to launch a VM and thers are > 'forgotten' VMs running with the same uuid in libvirt+kvm. > > If it's a bug, it's really a good one... > > Cheers > Diego > > -- > Diego Parrilla > <http://www.stackops.com/>*CEO* > *www.stackops.com <http://www.stackops.com/> | * > diego.parri...@stackops.com | US: +1 (512) 646-0068 | EU: +34 91 005-2164| > skype:diegoparrilla > > > > > On Mon, Dec 23, 2013 at 8:56 PM, Martinx - ジェームズ < > thiagocmarti...@gmail.com> wrote: > >> Hi! >> >> >> On 23 December 2013 16:53, gustavo panizzo <gfa> <g...@zumbi.com.ar>wrote: >> >>> is the user member of the two tenants? >>> >> >> No. "Tenant B" have only, and only one user. I never created a user that >> belongs to more than 1 tenant, my cloud is very simple and small. And >> "Tenant A" user is a member of its own Project, not two. >> >> Only my "Tenant C", have *two users* but, no user belongs to two >> tenants. I'm quite sure about this. >> >> Anyway, you made me a interesting question, how can I see the that? I >> mean, is there a command option to list all the tenants that a user is >> member of? I can see the keystone options like "user-role-list", or >> "tenant-get" but, I can't find a option to list the tenants that a user is >> a member of. Tips?! >> >> Tks! >> >> >>> "Martinx - ジェームズ" <thiagocmarti...@gmail.com> wrote: >>> >>>> Stackers! >>>> >>>> I need a bit help here... >>>> >>>> My OpenStack Havana (Ubuntu 12.04.3) was working smoothly and, I don't >>>> know what had happened here but, now, I'm seeing some weird problems. >>>> >>>> Right now, the "Tenant A" is seeing the VNC Consoles of "Tenant B" !!! >>>> >>>> How is that even possible?! There is no authentication here to deal >>>> with this kind of things!? I'm really worried about this. >>>> >>>> Look: >>>> >>>> "Tenant A" Instances: >>>> >>>> [image: Inline images 1] >>>> >>>> >>>> "Tenant A" accessing the VNC Console of a "Tenant B" Instance!!! >>>> >>>> [image: Inline images 2] >>>> >>>> >>>> This is a very serious problem, since I'm giving to the "Tenant A", >>>> almost total access to "Tenant B" Instances!! This kind of situation should >>>> NEVER occur! >>>> >>>> What can I do to completely block this? >>>> >>>> I just started a new Instance for "Tenant A", and I'm seeing ANOTHER >>>> VNC Console from "Tenant B"!! >>>> >>>> Regards, >>>> Thiago >>>> >>>> ------------------------------ >>>> >>>> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack >>>> >>>> >>>> >>>> >>>> >>>> Post to : openstack@lists.openstack.org >>>> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack >>>> >>>> >>>> >>>> >>>> >>> -- >>> 1AE0 322E B8F7 4717 BDEA BF1D 44BB 1BA7 9F6C 6333 >>> >> >> >> _______________________________________________ >> >> Mailing list: >> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack >> Post to : openstack@lists.openstack.org >> Unsubscribe : >> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack >> >> >
_______________________________________________ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
