Re: [one-users] Problem Isolating a dom0

2015-01-23 Thread Carlos Martín Sánchez
Hi there,

Probably the 'users' group has the Resource Provider ALL, which gives them
access to all the resources, including the new Cluster.
Can you check if this is the case?

Regards

--
Carlos Martín, MSc
Project Engineer
OpenNebula - Flexible Enterprise Cloud Made Simple
www.OpenNebula.org | cmar...@opennebula.org | @OpenNebula
http://twitter.com/opennebula cmar...@opennebula.org

On Fri, Jan 16, 2015 at 9:46 AM, Alejandro Feijóo alfei...@cesga.es wrote:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA512

 HI.

 Recently i added a new dom0 to Opennebula. But is a dom0 for a concrete
 proyect, and only can be used by an especific user/group.

 I do that:

 1.- Create a Datastore:

 106 dptos_DS  438.5G 95%   dptos 0 sys  -shared




 2.- Create a Cluster:

 106 dptos 1 0  1




 3.- And of course, attached the new dom0:

 65 elearning2  dptos 1100 / 800 (12%)  20G / 31.5G
 (63%) on



 4.- And Create a group to use that:

 [oneadmin@cloud ~]$ onegroup show 110
 GROUP 110 INFORMATION
 ID : 110
 NAME   : dptos

 GROUP TEMPLATE
 DEFAULT_VIEW=user
 SUNSTONE_VIEWS=user,cloud

 USERS
 ID

 RESOURCE PROVIDERS
ZONE CLUSTER
   0 106

 RESOURCE USAGE  QUOTAS


 At that point... the dpto cluster has the dom0 as owner and... no users
 at group 110 (dptos group)

 but..

 any user at group users can instantiate at elearning2 dom0...


 What i´m doing wrong?


 Thanks in advance.

 - --
 Alejandro Feijóo Fraga
 Systems Technician
 CESGA
 -BEGIN PGP SIGNATURE-
 Version: GnuPG/MacGPG2 v2.0.22 (Darwin)
 Comment: GPGTools - https://gpgtools.org

 iQEcBAEBCgAGBQJUuM/6AAoJEKshAoM6XWq5Q5AH/R3HgBdwdi/ebXakd1ID9EWX
 vw/ri1CG6pFpx/h4sf0YXMe6IjGKFST09Mklfl0neXg06Z+eqrLfh8Fx6si0tMbq
 eAFhVB8ECZi5mJHHWk70KlnjZqVCuiDHAzESdfmwMoeaOFFDMwLAQSc0H/CCtag3
 kbLEs6TMf1Rf6l+LKBRYKhGyaAP1Nm44xgTMlfxaJ3jAKnZbVu3lcYS+q8gZZxpx
 t6GAkphvSjEwVMv/5mPcvZ/odzt4M6gMrKLjq07ZETBe5msV/Kh3HBOxdAttidZA
 ddoQeZOSXOvaC+UqJ6weD2MSpZOXik1KuKTDBrTABRv4M5+LnRMOLZJicROMgsM=
 =WVsl
 -END PGP SIGNATURE-
 ___
 Users mailing list
 Users@lists.opennebula.org
 http://lists.opennebula.org/listinfo.cgi/users-opennebula.org

___
Users mailing list
Users@lists.opennebula.org
http://lists.opennebula.org/listinfo.cgi/users-opennebula.org


[one-users] Problem Isolating a dom0

2015-01-16 Thread Alejandro Feijóo
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

HI.

Recently i added a new dom0 to Opennebula. But is a dom0 for a concrete
proyect, and only can be used by an especific user/group.

I do that:

1.- Create a Datastore:

106 dptos_DS  438.5G 95%   dptos 0 sys  -shared




2.- Create a Cluster:

106 dptos 1 0  1




3.- And of course, attached the new dom0:

65 elearning2  dptos 1100 / 800 (12%)  20G / 31.5G
(63%) on



4.- And Create a group to use that:

[oneadmin@cloud ~]$ onegroup show 110
GROUP 110 INFORMATION
ID : 110
NAME   : dptos

GROUP TEMPLATE
DEFAULT_VIEW=user
SUNSTONE_VIEWS=user,cloud

USERS
ID

RESOURCE PROVIDERS
   ZONE CLUSTER
  0 106

RESOURCE USAGE  QUOTAS


At that point... the dpto cluster has the dom0 as owner and... no users
at group 110 (dptos group)

but..

any user at group users can instantiate at elearning2 dom0...


What i´m doing wrong?


Thanks in advance.

- -- 
Alejandro Feijóo Fraga
Systems Technician
CESGA
-BEGIN PGP SIGNATURE-
Version: GnuPG/MacGPG2 v2.0.22 (Darwin)
Comment: GPGTools - https://gpgtools.org

iQEcBAEBCgAGBQJUuM/6AAoJEKshAoM6XWq5Q5AH/R3HgBdwdi/ebXakd1ID9EWX
vw/ri1CG6pFpx/h4sf0YXMe6IjGKFST09Mklfl0neXg06Z+eqrLfh8Fx6si0tMbq
eAFhVB8ECZi5mJHHWk70KlnjZqVCuiDHAzESdfmwMoeaOFFDMwLAQSc0H/CCtag3
kbLEs6TMf1Rf6l+LKBRYKhGyaAP1Nm44xgTMlfxaJ3jAKnZbVu3lcYS+q8gZZxpx
t6GAkphvSjEwVMv/5mPcvZ/odzt4M6gMrKLjq07ZETBe5msV/Kh3HBOxdAttidZA
ddoQeZOSXOvaC+UqJ6weD2MSpZOXik1KuKTDBrTABRv4M5+LnRMOLZJicROMgsM=
=WVsl
-END PGP SIGNATURE-
___
Users mailing list
Users@lists.opennebula.org
http://lists.opennebula.org/listinfo.cgi/users-opennebula.org