[one-users] Some more info

[Tino Vazquez]

Hi Harsha,

comments inline,

On Mon, Aug 10, 2009 at 2:39 PM, Harsha Buggi <Harsha_Buggi at mindtree.com>wrote:

> I tried creating a new user on the system and also created the same user
> using 'oneuser create' command. I did not set the ONE_AUTH variable.I then
> logged into the system with the new user credentials and I am able to start
> and stop one server.Shoudnt one server be checking for ONE_AUTH variable and
> thus not allow the new user to perform any action?
>
> My sudoers file entry is:
> %cloud ALL=NOPASSWD: ALL


The new created user shouldn't be able to stop the one server. This is not
OpenNebula's domain, here we are talking kernel permissions on operations.
Could you check:

1) Which user is running the one server

2) If, after stopping the one server with the new user, the one server
process has indeed stopped (pgrep oned). It may be the case that the process
is still running.


>
> ________________________________
> From: Harsha Buggi
> Sent: Monday, August 10, 2009 5:54 PM
> To: users at lists.opennebula.org
> Subject: Cannot shutdown VM
>
> Hi,
>
>   I have installed Nebula on an fc8 machine with NIS and NFS support. Using
> Oneadmin login to create VM's
>
>   I have couple of issues:
>
> 1) I am not able to shutdown VM's. By default fc8 installs 'qemu-kvm' and I
> have created the symbolic link 'kvm' for this file. But after I create the
> VM's I am not able to perform a shutdown. I tried changing the 'emulator' to
> 'qemu-kvm' in libvirtdriver.cc file and reinstalling but I am still not able
> to shutdown the VM. I am able to do this if I install v1.2. I am using the
> following versions of hypervisor and libvirt
> kvm-60
> qemu-0.9.0-7
> libvirt-0.4.4
> libvirt-python-0.4.4
>
> 2) I found that libvirt v 0.4.4 does not support user logins apart from
> root. This seems to have been fixed in the  released recently v0.7.0. This
> could be the solution to the issue described in
>
> http://lists.opennebula.org/pipermail/users-opennebula.org/2009-August/000626.html
> In my case I have modified the one_vmm_kvm.rb file to reflect
> create   => "sudo virsh  create" instead of 'create   => "virsh -c
> qemu:///session<UrlBlockedError.aspx> create"'
>
> 3) After creating a new user using 'oneuser create' command and setting the
> ONE_AUTH variable how do I set VM permissions for this user?
>
Should this user be created on the system too?




>
> Regards,
> Harsha


Best,

-T


--
Constantino Vázquez, Grid Technology Engineer/Researcher:
http://www.dsa-research.org/tinova
DSA Research Group: http://dsa-research.org
Globus GridWay Metascheduler: http://www.GridWay.org
OpenNebula Virtual Infrastructure Engine: http://www.OpenNebula.org

>
>
>
>
> ________________________________
> http://www.mindtree.com/email/disclaimer.html
> _______________________________________________
> Users mailing list
> Users at lists.opennebula.org
> http://lists.opennebula.org/listinfo.cgi/users-opennebula.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opennebula.org/pipermail/users-opennebula.org/attachments/20090820/1064cbe4/attachment-0003.htm>