,
Hyunwoo
FermiCloud
From: Ruben S. Montero rsmont...@opennebula.org
Date: Wednesday, April 16, 2014 9:37 AM
To: Carlos Martín Sánchez cmar...@opennebula.org
Cc: Hyunwoo Kim hyun...@fnal.gov, users users@lists.opennebula.org
Subject: Re: [one-users] restricted_attr in oned.conf of ON44
Hi Hyun
, Steven C Timm
t...@fnal.govmailto:t...@fnal.gov
Subject: Re: [one-users] restricted_attr in oned.conf of ON44
On Wed, Apr 16, 2014 at 5:15 PM, Hyun Woo Kim
hyun...@fnal.govmailto:hyun...@fnal.gov wrote:
Hi Ruben,
Thanks for the message. (It's still confusing to me though.)
Let me see if I
...@opennebula.org
Date: Thursday, April 17, 2014 4:37 PM
To: Hyunwoo Kim hyun...@fnal.gov
Cc: Carlos Martín Sánchez cmar...@opennebula.org, users
users@lists.opennebula.org, Steven C Timm t...@fnal.gov
Subject: Re: [one-users] restricted_attr in oned.conf of ON44
On Wed, Apr 16, 2014
Hi,
There is not much to it, it should be working as you describe. We'll try to
reproduce it and fix it for 4.6 if it's broken.
http://dev.opennebula.org/issues/2838
Regards.
--
Carlos Martín, MSc
Project Engineer
OpenNebula - Flexible Enterprise Cloud Made Simple
www.OpenNebula.org |
Hi Hyun
We've taken a look into it and it seems to be working. A couple of notes:
1.- VM Template is checked for restricted attributes if the owner is not
oneadmin (or in oneadmin group). The rationale behind it is that oneadmin
can prepare templates with unsafe attributes but let the user
, users
users@lists.opennebula.orgmailto:users@lists.opennebula.org
Subject: Re: [one-users] restricted_attr in oned.conf of ON44
Hi Hyun
We've taken a look into it and it seems to be working. A couple of notes:
1.- VM Template is checked for restricted attributes if the owner is not
oneadmin
Hello,
http://docs.opennebula.org/4.4/administration/references/oned_conf.html#oned-conf-restricted-attributes-configuration
says we can use {VM,IMAGE}_RESTRICTED_ATTR
to restrict users outside the oneadmin group
but I experiment as a user whose group is users, not oneadmin
to launch a VM from a