<div dir="ltr">Thank you<br></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Fri, Aug 16, 2013 at 3:41 AM, Hector Sanjuan <span dir="ltr"><<a href="mailto:lists@convivencial.org" target="_blank">lists@convivencial.org</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><u></u>
<div><div>If you are really worried about privacy you should not let users connect via VNC to the machines, least of all via a web client.</div><div><br></div><div>VNC is handy to see why a machine doesn't boot and other specific administration tasks, but other than that you may want to have your users ssh into the machines with public-key authentication only.</div>
<div><br></div><div>Still... whatever you do... oneadmin runs the cloud. That means the person behind oneadmin can connect to any hypervisor and enter any VM at will and see/log what he/she wants. No real need to use VNC if you are oneadmin and want to see what's going on somewhere.</div>
<div><br></div><div>Br, Hector</div><div><div class="h5"><div><br></div><div>On Thu, 15 Aug 2013 16:42:18 +0200, Mohammad Fazli Ahmat Jalaluddin <<a href="mailto:fazli.jalaluddin@gmail.com" target="_blank">fazli.jalaluddin@gmail.com</a>> wrote:<br>
</div><br><blockquote style="margin:0 0 0.80ex;border-left:#0000ff 2px solid;padding-left:1ex"><div dir="ltr"><div><div><div><div>Hi,<br><br></div>Thank you for the explanation, but password in UNIX is stored in hashes while password for SPICE or VNC is stored in plaintext.<br>
<br></div>Is there any way to encrypt the password?<br>
<br></div>Thank you.<br><br></div>Regards<br></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Aug 15, 2013 at 8:33 PM, Daniel Molina <span dir="ltr"><<a href="mailto:dmolina@opennebula.org" target="_blank">dmolina@opennebula.org</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi,<div class="gmail_extra"><br><br><div class="gmail_quote"><div><div>On 15 August 2013 06:10, Mohammad Fazli Ahmat Jalaluddin <span dir="ltr"><<a href="mailto:fazli.jalaluddin@gmail.com" target="_blank">fazli.jalaluddin@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><div>Hi,<br><br></div>I just wondering, why OpenNebula admin (oneadmin) can access to all user's VM? <br>
<br>If the admin open user's VM VNC, they can see what the users are doing. Is the any way to prevent this?<br>
<br>Also, admin can see template details such as PASSWORD for SPICE or VNC even for user's template. <br></div></div></div></blockquote><div><br></div></div></div><div>The oneadmin account it's like root in UNIX, with this account you have full access to the cloud resources. You can define ACLs and permissions for the rest of users, but oneadmin will ignore these rules.</div>
<div><br></div><div>Cheers</div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><br></div><div>Thank you.<br><br></div><div>Regards<br>
</div><div><br></div><br><br></div><br></div>
<br>_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@lists.opennebula.org" target="_blank">Users@lists.opennebula.org</a><br>
<a href="http://lists.opennebula.org/listinfo.cgi/users-opennebula.org" target="_blank">http://lists.opennebula.org/listinfo.cgi/users-opennebula.org</a><br>
<br></blockquote></div><span><font color="#888888"><br><br clear="all"><div><br></div>-- <br><div dir="ltr"><div>Join us at <a href="http://opennebulaconf.com/" target="_blank">OpenNebulaConf2013</a> in Berlin, 24-26 September, 2013<br>
</div><div>--</div>
Daniel Molina<br>Project Engineer<br>OpenNebula - The Open Source Solution for Data Center Virtualization<br><a href="http://www.OpenNebula.org" target="_blank">www.OpenNebula.org</a> | <a href="mailto:dmolina@opennebula.org" target="_blank">dmolina@opennebula.org</a> | @OpenNebula</div>
</font></span></div></div>
</blockquote></div><br></div>
</blockquote><br><br><br></div></div><div><div>-- </div><div>Hector Sanjuan<br>@hecsanjuan</div></div></div></blockquote></div><br></div>