Hi Salma,<br><br>It looks like you didn't set-up the environment variables referenced here [1] for your new account (specially the PATH).<br><br>I would recommend you to use the :authentication: simple option in auth.conf, to authenticate users with the one_auth file contents (username:password). This way you can play around with the authorization and then move on to the strongest ssh authentication.<br>
<br>Regards,<br>Carlos.<br><br>[1] <a href="http://opennebula.org/documentation:rel2.2:cg#opennebula_users">http://opennebula.org/documentation:rel2.2:cg#opennebula_users</a><br clear="all"><span style="border-collapse:collapse;color:rgb(136, 136, 136);font-family:arial, sans-serif;font-size:13px">--<br>
Carlos Martín, MSc<br>Project Major Contributor<br><span style="background-color:rgb(255, 255, 204);color:rgb(34, 34, 34);background-repeat:initial initial">OpenNebula</span> - The Open Source Toolkit for Cloud Computing<br>
<a href="http://www.opennebula.org/" style="color:rgb(42, 93, 176)" target="_blank">www.<span style="background-color:rgb(255, 255, 204);color:rgb(34, 34, 34);background-repeat:initial initial">OpenNebula</span>.org</a> | <a href="mailto:cmartin@opennebula.org" style="color:rgb(42, 93, 176)" target="_blank">cmartin@<span style="background-color:rgb(255, 255, 204);color:rgb(34, 34, 34);background-repeat:initial initial">opennebula</span>.org</a></span><br>
<br><br><div class="gmail_quote">2011/6/2 salma rebai <span dir="ltr"><<a href="mailto:rebai.salma@gmail.com">rebai.salma@gmail.com</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
hi,<div>thank you for your response.</div><div>But i still have problems with user management and some unclear points. In fact, i have Opennebula installed in a self contained directory.</div><div>if i want to create a new user to opennebula, should that user be really created in my System or it is not necessary.</div>
<div>I follow this guide [1], i have created a new user in my system, then i generated the rsa- key, but i don't understand how to do the extraction of </div><div>public key. the guide mention that it should be done bye the users by using the command "oneauth key.." and sent to the administrators..... but the user have not this command .</div>
<div><br></div><div> -bash: oneauth: command not found</div><div><br></div><div>I have extracted the key using the oneadmin account, and i create the new user with the oneuser create command. the user is added in the table list, and when i execute the command i have this result</div>
<div><br></div><div><div> [oneadmin@node020 ~]$ oneauth login salma</div><div> export ONE_AUTH=/data1/opennebula/.one/one_ssh</div><div> [oneadmin@node020 ~]$</div></div><div><br></div><div>
<br>
</div><div> but i could not login as the new user to execute opennebula fonctionalities.</div><div>what is the problem?? am i doing some thing wrong??</div><div>Can you give me some clarification please.</div><div>thanks in advance.</div>
<div class="im">
<div><br></div><div>[1]<a href="http://opennebula.org/documentation:rel2.2:users" target="_blank">http://opennebula.org/documentation:rel2.2:users</a></div><div><br></div><div><br></div></div><div>Best regards, </div><div>
SALMA.<div><div></div><div class="h5"><br><br><div class="gmail_quote">
2011/6/1 Carlos Martín Sánchez <span dir="ltr"><<a href="mailto:cmartin@opennebula.org" target="_blank">cmartin@opennebula.org</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Hi,<br><br>Take a look at these links [1,2].<br><br>In /lib/one/ruby/simple_permissions.rb (or $ONE_LOCATION/lib/ruby/simple_permissions.rb in a self-contained installation) you have to modify the auth_object method. Assuming you want to give user 7 the same authorization as oneadmin:<br>
<br>--- a/src/authm_mad/simple_permissions.rb<br>+++ b/src/authm_mad/simple_permissions.rb<br>@@ -78,7 +78,7 @@ class SimplePermissions<br> # Authorizes each of the tokens. All parameters are strings. Pub<br> # means public when "1" and private when "0"<br>
def auth_object(uid, object, id, action, owner, pub)<br>- return true if uid=='0'<br>+ return true if (uid=='0' || uid=='7')<br> <br> auth_result=false<br><br>Best regards,<br>
Carlos.<br><br>[1] <a href="http://opennebula.org/documentation:rel2.2:users" target="_blank">http://opennebula.org/documentation:rel2.2:users</a><br>[2] <a href="http://opennebula.org/documentation:rel2.2:auth" target="_blank">http://opennebula.org/documentation:rel2.2:auth</a><br>
<br> <br clear="all"><span style="border-collapse:collapse;color:rgb(136, 136, 136);font-family:arial, sans-serif;font-size:13px">--<br>Carlos Martín, MSc<br>Project Major Contributor<br><span style="background-color:rgb(255, 255, 204);color:rgb(34, 34, 34);background-repeat:initial initial">OpenNebula</span> - The Open Source Toolkit for Cloud Computing<br>
<a href="http://www.opennebula.org/" style="color:rgb(42, 93, 176)" target="_blank">www.<span style="background-color:rgb(255, 255, 204);color:rgb(34, 34, 34);background-repeat:initial initial">OpenNebula</span>.org</a> | <a href="mailto:cmartin@opennebula.org" style="color:rgb(42, 93, 176)" target="_blank">cmartin@<span style="background-color:rgb(255, 255, 204);color:rgb(34, 34, 34);background-repeat:initial initial">opennebula</span>.org</a></span><br>
<br><br><div class="gmail_quote"><div><div></div><div>On Wed, Jun 1, 2011 at 12:24 PM, salma rebai <span dir="ltr"><<a href="mailto:rebai.salma@gmail.com" target="_blank">rebai.salma@gmail.com</a>></span> wrote:<br>
</div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div></div><div>
Hi all,<div>I work with Opennbeula2.2. I would know is that possible to create a second administrator account to opennebula( an internel user). What should I do to create an internal user to OpenNebula. Is there some configuration in the auth file to make.</div>
<div>Thanks in advance.<br clear="all"><br>-- <br>Salma REBAI<br>Ingénieur Informatique<br>
Mastère Réseaux et Systèmes Multimédia<br>Ecole Nationale des Sciences Informatiques Univ. Manouba, Tunisie<br>Institut Télécom SudParis<br><a href="mailto:rebai.salma@gmail.com" target="_blank">rebai.salma@gmail.com</a><br>
</div>
<br></div></div>_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@lists.opennebula.org" target="_blank">Users@lists.opennebula.org</a><br>
<a href="http://lists.opennebula.org/listinfo.cgi/users-opennebula.org" target="_blank">http://lists.opennebula.org/listinfo.cgi/users-opennebula.org</a><br>
<br></blockquote></div><br>
</blockquote></div><br><br clear="all"><br>-- <br>Salma REBAI<br>Ingénieur Informatique<br>
Mastère Réseaux et Systèmes Multimédia<br>Ecole Nationale des Sciences Informatiques Univ. Manouba, Tunisie<br>Institut Télécom SudParis<br><a href="mailto:rebai.salma@gmail.com" target="_blank">rebai.salma@gmail.com</a><br>
</div></div></div>
</blockquote></div><br>