Difference between revisions of "Terminating access to an OpenStack environment"

From FnordWiki
Jump to navigation Jump to search
(Created page with "== keystone user accounts == keystone user-list keystone user-password-update 0123456789abcdef0123456789abcdef == host machines' firewalls == === Linux systems === iptable...")
 
 
Line 1: Line 1:
 
== keystone user accounts ==
 
== keystone user accounts ==
 
keystone user-list
 
keystone user-list
keystone user-password-update 0123456789abcdef0123456789abcdef
+
keystone user-password-update 0123456789abcdef0123456789abcdef # that's the user's id from the user-list output. New password will be prompted for.
   
 
== host machines' firewalls ==
 
== host machines' firewalls ==

Latest revision as of 07:23, 21 February 2015

keystone user accounts

keystone user-list
keystone user-password-update 0123456789abcdef0123456789abcdef  # that's the user's id from the user-list output.  New password will be prompted for.

host machines' firewalls

Linux systems

iptables -I INPUT -s RemoteUserCIDR -j REJECT

Windows

TBD

user accounts

Linux

passwd root    # change root's password
passwd -l username
chsh -s /usr/sbin/nologin USERNAME
cp -p ~root/.ssh/authorized_keys ~root/.ssh/authorized_keys- && cat /dev/null | tee ~root/.ssh/authorized_keys
Probably
  • Remove membership from any privileged groups
  • Remove any sudoers listings
  • Review cron and at jobs
  • Disable salt/puppet/chef/cfengine/whatever clients

Windows

Run lusrmgr.msc and disable user's account.