Terminating access to an OpenStack environment

keystone user accounts

keystone user-list
keystone user-password-update 0123456789abcdef0123456789abcdef

host machines' firewalls

Linux systems

iptables -I INPUT -s RemoteUserCIDR -j REJECT

Windows

TBD

user accounts

Linux

passwd root    # change root's password
passwd -l username
chsh -s /usr/sbin/nologin USERNAME
cp -p ~root/.ssh/authorized_keys ~root/.ssh/authorized_keys- && cat /dev/null | tee ~root/.ssh/authorized_keys
Probably

• Remove membership from any privileged groups
• Remove any sudoers listings
• Review cron and at jobs
• Disable salt/puppet/chef/cfengine/whatever clients

Windows

Run lusrmgr.msc and disable user's account.