<div dir="ltr">Okay, I got it...<div><br></div><div>"Tenant B / Project B", have only 1 member, and it is NOT the user from "Tenant A".</div><div><br></div><div>But, as I said, the user from "Tenant A", is seeing the VNC consoles of Tenant B VMs anyway, I'm sure this is a security breach.</div>
<div><br></div><div>Cheers!</div><div>Thiago</div><div class="gmail_extra"><br><div class="gmail_quote">On 23 December 2013 17:56, Martinx - $B%8%'!<%`%:(B <span dir="ltr"><<a href="mailto:thiagocmartinsc@gmail.com" target="_blank">thiagocmartinsc@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">Hi!<div class="gmail_extra"><br><br><div class="gmail_quote"><div>On 23 December 2013 16:53, gustavo panizzo <gfa> <span dir="ltr"><<a href="mailto:gfa@zumbi.com.ar" target="_blank">gfa@zumbi.com.ar</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div>is the user member of the two tenants?<br></div></blockquote>
<div><br></div></div><div>No. "Tenant B" have only, and only one user. I never created a user that belongs to more than 1 tenant, my cloud is very simple and small. And "Tenant A" user is a member of its own Project, not two.</div>
<div><br></div><div>Only my "Tenant C", have <u>two users</u> but, no user belongs to two tenants. I'm quite sure about this.</div><div><br></div><div>Anyway, you made me a interesting question, how can I see the that? I mean, is there a command option to list all the tenants that a user is member of? I can see the keystone options like "user-role-list", or "tenant-get" but, I can't find a option to list the tenants that a user is a member of. Tips?!</div>
<div><br></div><div>Tks!</div><div><div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div><div class="gmail_quote">
<div><div>"Martinx - $B%8%'!<%`%:(B" <<a href="mailto:thiagocmartinsc@gmail.com" target="_blank">thiagocmartinsc@gmail.com</a>> wrote:</div></div><blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex">
<div><div>
<div dir="ltr">Stackers!<div><br></div><div>I need a bit help here...</div><div><br></div><div>My OpenStack Havana (Ubuntu 12.04.3) was working smoothly and, I don't know what had happened here but, now, I'm seeing some weird problems.</div>
<div><br></div><div>Right now, the "Tenant A" is seeing the VNC Consoles of "Tenant B" !!!</div><div><br></div><div>How is that even possible?! There is no authentication here to deal with this kind of things!? I'm really worried about this.</div>
<div><br></div><div>Look:</div><div><br></div><div>"Tenant A" Instances:</div><div><br></div><div><img src="http://i.imgur.com/guewQZs.png" alt="Inline images 1" width="474" height="296"><br></div><div><br></div>
<div><br></div><div>"Tenant A" accessing the VNC Console of a "Tenant B" Instance!!!</div><div><br></div><div><img src="http://i.imgur.com/piTTmXo.png" alt="Inline images 2" width="474" height="296"><br>
</div><div><br></div><div><br></div><div>This is a very serious problem, since I'm giving to the "Tenant A", almost total access to "Tenant B" Instances!! This kind of situation should NEVER occur!</div>
<div><br></div><div>What can I do to completely block this?</div><div><br></div><div>I just started a new Instance for "Tenant A", and I'm seeing ANOTHER VNC Console from "Tenant B"!!</div><div><br>
</div><div>Regards,</div><div>Thiago</div></div>
<p style="margin-top:2.5em;margin-bottom:1em;border-bottom-width:1px;border-bottom-style:solid;border-bottom-color:rgb(0,0,0)"></p></div></div><pre><hr><div><br>Mailing list: <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
Post to : <a href="mailto:openstack@lists.openstack.org" target="_blank">openstack@lists.openstack.org</a><br>Unsubscribe : <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
</div></pre></blockquote></div><br>
--<br>
1AE0 322E B8F7 4717 BDEA BF1D 44BB 1BA7 9F6C 6333</div></blockquote></div></div></div><br></div></div>
</blockquote></div><br></div></div>