Re: [one-users] restricted_attr in oned.conf of ON44

2014-04-17 Thread Ruben S. Montero
, Hyunwoo FermiCloud From: Ruben S. Montero rsmont...@opennebula.org Date: Wednesday, April 16, 2014 9:37 AM To: Carlos Martín Sánchez cmar...@opennebula.org Cc: Hyunwoo Kim hyun...@fnal.gov, users users@lists.opennebula.org Subject: Re: [one-users] restricted_attr in oned.conf of ON44 Hi Hyun

Re: [one-users] restricted_attr in oned.conf of ON44

2014-04-17 Thread Hyun Woo Kim
, Steven C Timm t...@fnal.govmailto:t...@fnal.gov Subject: Re: [one-users] restricted_attr in oned.conf of ON44 On Wed, Apr 16, 2014 at 5:15 PM, Hyun Woo Kim hyun...@fnal.govmailto:hyun...@fnal.gov wrote: Hi Ruben, Thanks for the message. (It's still confusing to me though.) Let me see if I

Re: [one-users] restricted_attr in oned.conf of ON44

2014-04-17 Thread Ruben S. Montero
...@opennebula.org Date: Thursday, April 17, 2014 4:37 PM To: Hyunwoo Kim hyun...@fnal.gov Cc: Carlos Martín Sánchez cmar...@opennebula.org, users users@lists.opennebula.org, Steven C Timm t...@fnal.gov Subject: Re: [one-users] restricted_attr in oned.conf of ON44 On Wed, Apr 16, 2014

Re: [one-users] restricted_attr in oned.conf of ON44

2014-04-16 Thread Carlos Martín Sánchez
Hi, There is not much to it, it should be working as you describe. We'll try to reproduce it and fix it for 4.6 if it's broken. http://dev.opennebula.org/issues/2838 Regards. -- Carlos Martín, MSc Project Engineer OpenNebula - Flexible Enterprise Cloud Made Simple www.OpenNebula.org |

Re: [one-users] restricted_attr in oned.conf of ON44

2014-04-16 Thread Ruben S. Montero
Hi Hyun We've taken a look into it and it seems to be working. A couple of notes: 1.- VM Template is checked for restricted attributes if the owner is not oneadmin (or in oneadmin group). The rationale behind it is that oneadmin can prepare templates with unsafe attributes but let the user

Re: [one-users] restricted_attr in oned.conf of ON44

2014-04-16 Thread Hyun Woo Kim
, users users@lists.opennebula.orgmailto:users@lists.opennebula.org Subject: Re: [one-users] restricted_attr in oned.conf of ON44 Hi Hyun We've taken a look into it and it seems to be working. A couple of notes: 1.- VM Template is checked for restricted attributes if the owner is not oneadmin

[one-users] restricted_attr in oned.conf of ON44

2014-04-15 Thread Hyun Woo Kim
Hello, http://docs.opennebula.org/4.4/administration/references/oned_conf.html#oned-conf-restricted-attributes-configuration says we can use {VM,IMAGE}_RESTRICTED_ATTR to restrict users outside the oneadmin group but I experiment as a user whose group is users, not oneadmin to launch a VM from a