<div dir="ltr">Hi Thang Pham and all !<br><br>I am using KVM on OpenStack Havana , OpenStack Icehouse , And inject admin password OK. SURE 100% <br><br><div><br></div><div><b>Step 1</b> : Edit /etc/nova/nova.conf</div><div>
<br></div><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><div>[DEFAULT ]</div><div>....</div><div><br></div><div><div>libvirt_inject_password=True</div></div><div><div>enable_instance_password = True</div></div>
</blockquote><div><br></div><div><b>Step 22:</b><br>If you use image cirros, ubuntu .... downloading from Internet, then you will modify /etc/ssh/sshd_config to disable authentication private key (rsa): (Example Ubuntu 13.10)</div>
<div><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><div><span style="background-color:rgb(255,153,0)"><br></span></div><div><div><span style="background-color:rgb(255,153,0)">#Line 15 Un-comment</span></div>
</div><div><div><span style="background-color:rgb(255,153,0)">UsePrivilegeSeparation yes</span></div></div><div><div><span style="background-color:rgb(255,153,0)"><br></span></div></div><div><div><span style="background-color:rgb(255,153,0)">#Line 30: Comment 30</span></div>
</div><div><div><span style="background-color:rgb(255,153,0)">#RSAAuthentication no</span></div></div><div><div><span style="background-color:rgb(255,153,0)"><br></span></div></div><div><div><span style="background-color:rgb(255,153,0)">#Line 31</span></div>
</div><div><div><span style="background-color:rgb(255,153,0)">PubkeyAuthentication no</span></div></div><div><div><span style="background-color:rgb(255,153,0)"><br></span></div></div><div><div><span style="background-color:rgb(255,153,0)">#Line 51</span></div>
</div><div><div><span style="background-color:rgb(255,153,0)">PasswordAuthentication yes</span></div></div></blockquote></div><div><div><br></div><div><br></div><div>Besides, You can create image for GLANCE by yourself.</div>
<div><br></div><div>Note: On KVM not support reset password. You can see <a href="https://wiki.openstack.org/wiki/HypervisorSupportMatrix">https://wiki.openstack.org/wiki/HypervisorSupportMatrix</a></div><div><br></div><div>
Good luck for U !<br></div><div><br>P/S: Thắng: Tính năng này là tính năng chèn password ngay khi khởi tạo máy, mình thực hiện tốt trên KVM <br><br></div></div><div class="gmail_extra">tu0ng_c0ng<br><br><div class="gmail_quote">
On Wed, Jun 25, 2014 at 10:48 AM, Thang Pham <span dir="ltr"><<a href="mailto:thang.g.pham@gmail.com" target="_blank">thang.g.pham@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div dir="ltr"><div style="font-family:verdana,sans-serif"><div style="font-size:13px">Hi Wangpan,</div><div style="font-size:13px"><br></div><div style="font-size:13px">
Injecting admin password is not implemented or supported in libvirt/kvm. I believe only Xen supports it.</div><div style="font-size:13px"><br></div><div style="font-size:13px">
Regards,</div><div style="font-size:13px">Thang</div></div></div><div class="gmail_extra"><br><br><div class="gmail_quote"><div><div class="h5">On Tue, Jun 24, 2014 at 11:36 PM, Wangpan <span dir="ltr"><<a href="mailto:hzwangpan@corp.netease.com" target="_blank">hzwangpan@corp.netease.com</a>></span> wrote:<br>
</div></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div><div class="h5"><u></u>
<div style="line-height:1.3;border-width:0px;margin:12px" marginwidth="0" marginheight="0"><u></u>
<div>
<div><font face="微软雅黑"><font face="微软雅黑"><font face="微软雅黑"><font color="#000000" size="3" face="宋体">Hi all,</font></font></font></font></div>
<div><font color="#000000" size="3"></font> </div>
<div><font face="微软雅黑"><font face="微软雅黑">I want to inject admin password to a
libvirt/kvm instance, and I enable the config libvirt_inject_password=true on
the compute node,</font></font></div>
<div><font face="微软雅黑">I also find the /etc/shadow file in the instance is
changed, but when I use the adminPass to login the instance from vnc, it is
failed.</font></div>
<div><font face="微软雅黑">I find that the admin password is encrypted in
nova/virt/disk/api.py:_set_password() method,</font></div>
<div><font face="微软雅黑">evenif I </font><font face="微软雅黑">encrypt my adminPass
and replace the root password in /etc/shadow manually, I can't login the
instance with vnc.</font></div>
<div><font face="微软雅黑"></font> </div>
<div><font face="微软雅黑">My questions are:</font></div>
<div><font face="微软雅黑">1) Does this admin password injection function of
libvirt driver useable? In other words, my issue is a bug or not?</font></div>
<div><font face="微软雅黑">2) Are there some special details I was losing sight
of? such as any configs should change?</font></div>
<div><font face="微软雅黑">3) Is this function depends on the libc
version?</font></div>
<div><font face="微软雅黑"><font face="微软雅黑"><font face="微软雅黑"></font> </font></font></div>
<div>BTW, I'm using stable havana and booting a debian7 instance, and this is
the admin guide page of this function:</div>
<div><a href="http://docs.openstack.org/admin-guide-cloud/content/admin-password-injection.html" target="_blank">http://docs.openstack.org/admin-guide-cloud/content/admin-password-injection.html</a></div>
<div> </div>
<div>thanks!</div>
<div> </div>
<div><font face="微软雅黑"><a href="tel:2014-06-25%C2%A011" value="+12014062511" target="_blank">2014-06-25 11</a>:16 (UTC+8)</font></div><span><font color="#888888">
<div><font face="微软雅黑">Wangpan</font></div><u></u></font></span></div></div><br></div></div>_______________________________________________<br>
Mailing list: <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
Post to : <a href="mailto:openstack@lists.openstack.org" target="_blank">openstack@lists.openstack.org</a><br>
Unsubscribe : <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
<br></blockquote></div><br></div>
<br>_______________________________________________<br>
Mailing list: <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
Post to : <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br>
Unsubscribe : <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
<br></blockquote></div><br></div></div>