https://wiki.fnord.greeley.co.us/mediawiki/index.php?action=history&feed=atom&title=Terminating_access_to_an_OpenStack_environment 2026-05-13T13:42:02Z Revision history for this page on the wiki MediaWiki 1.39.17 https://wiki.fnord.greeley.co.us/mediawiki/index.php?title=Terminating_access_to_an_OpenStack_environment&diff=711&oldid=prev 2015-02-21T07:23:55Z

<p><span dir="auto"><span class="autocomment">keystone user accounts</span></span></p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 07:23, 21 February 2015</td> </tr><tr> <td colspan="2" class="diff-lineno">Line 1:</td> <td colspan="2" class="diff-lineno">Line 1:</td> </tr> <tr> <td class="diff-marker"></td> <td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== keystone user accounts ==</div></td> <td class="diff-marker"></td> <td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== keystone user accounts ==</div></td> </tr> <tr> <td class="diff-marker"></td> <td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div> keystone user-list</div></td> <td class="diff-marker"></td> <td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div> keystone user-list</div></td> </tr> <tr> <td class="diff-marker" data-marker="−"></td> <td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div> keystone user-password-update 0123456789abcdef0123456789abcdef</div></td> <td class="diff-marker" data-marker="+"></td> <td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div> keystone user-password-update 0123456789abcdef0123456789abcdef<ins style="font-weight: bold; text-decoration: none;"> # that's the user's id from the user-list output. New password will be prompted for.</ins></div></td> </tr> <tr> <td class="diff-marker"></td> <td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br /></td> <td class="diff-marker"></td> <td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br /></td> </tr> <tr> <td class="diff-marker"></td> <td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== host machines' firewalls ==</div></td> <td class="diff-marker"></td> <td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== host machines' firewalls ==</div></td> </tr> <!-- diff cache key wikidb:diff:wikidiff2:1.12:old-710:rev-711:1.13.0 --> </table>

Adj https://wiki.fnord.greeley.co.us/mediawiki/index.php?title=Terminating_access_to_an_OpenStack_environment&diff=710&oldid=prev 2015-02-20T22:44:20Z

<p>Created page with &quot;== keystone user accounts == keystone user-list keystone user-password-update 0123456789abcdef0123456789abcdef == host machines&#039; firewalls == === Linux systems === iptable...&quot;</p> <p><b>New page</b></p><div>== keystone user accounts ==<br /> keystone user-list<br /> keystone user-password-update 0123456789abcdef0123456789abcdef<br /> <br /> == host machines&#039; firewalls ==<br /> === Linux systems ===<br /> iptables -I INPUT -s RemoteUserCIDR -j REJECT<br /> === Windows ===<br /> &#039;&#039;TBD&#039;&#039;<br /> <br /> == user accounts ==<br /> === Linux ===<br /> passwd root # change root&#039;s password<br /> passwd -l username<br /> chsh -s /usr/sbin/nologin USERNAME<br /> cp -p ~root/.ssh/authorized_keys ~root/.ssh/authorized_keys- &amp;&amp; cat /dev/null | tee ~root/.ssh/authorized_keys<br /> Probably<br /> * Remove membership from any privileged groups<br /> * Remove any sudoers listings<br /> * Review cron and at jobs<br /> * Disable salt/puppet/chef/cfengine/whatever clients<br /> <br /> === Windows ===<br /> Run &lt;code&gt;lusrmgr.msc&lt;/code&gt; and disable user&#039;s account.</div>

Adj