[Openstack] [Nova] What is the correct way to provide Windows instance password for user?
Georgios Dimitrakakis
giorgis at acmac.uoc.gr
Tue Jan 21 07:44:38 UTC 2014
Indeed this is very interesting!
I would also like to see it if possible!
Best,
G.
On Tue, 21 Jan 2014 08:22:44 +0100, Joe Topjian wrote:
> Hi Juerg,
>
> Thats a really creative way of setting the password. Are you able to
> share your powershell script?
>
> Thanks,
> Joe
>
> On Tue, Jan 21, 2014 at 8:15 AM, Juerg Haefliger wrote:
>
>> On Tue, Jan 21, 2014 at 3:15 AM, jeffty wrote:
>>>
>>> Thanks Joe, It really helps.
>> >
>>> Will check them to find the proper way.
>> >
>>> Thanks.
>>>
>>> On 1/19/2014 3:32 PM, Joe Topjian wrote:
>>> > Hello,
>>> >
>>> > Weve used this in the past:
>>> >
>>> > https://github.com/jordanrinke/openstack [2]
>> > >
>>> > It allows a user to type in an Administrator password in the
>> Post Config
>>> > text box when launching an instance in Horizon. The password is
>> then
>>> > retrieved when Windows first boots via the metadata service.
>> > >
>>> > We stopped using it for two reasons, though:
>>> >
>>> > 1. The password was permanently stored in the metadata server
>>> > 2. There was no (default) way to let the user know that the
>> password
>> > > they chose was not a strong enough password
>>> >
>>> > We now just have users connect to the VNC console and set the
>> password
>>> > upon first boot.
>>> >
>>> > There have been a few discussions over the past year on the
>> > > openstack-operators list about the cloudbase Windows cloud-init
>> service.
>>> > I think one or two people have been able to get the password
>> injection
>>> > portion working. It might be worth a shot to search the
>> archives:
>> > >
>>> > http://www.gossamer-threads.com/lists/openstack/operators/ [3]
>>> >
>>> > Joe
>>> >
>>> >
>> > > On Sun, Jan 19, 2014 at 4:21 AM, jeffty > > wrote:
>>> >
>>> > Thanks Jacob.
>>> >
>>> > Is there any openstack API guide for send instance
>> password while
>> > > launch it?
>>> >
>>> > Thanks.
>>> >
>>> > On 1/19/2014 11:08 AM, Jacob Godin wrote:
>>> > > Yes, they must input a password every time. Its within
>> Windows, they
>> > > > must use the console.
>>> > >
>>> > > Sent from my mobile device
>>> > >
>>> > > On Jan 18, 2014 10:51 PM, "jeffty" >
>>> > > >
>> > > wrote:
>>> > >
>>> > > Thanks Jacob.
>>> > >
>>> > > Then the user must input a password for every
>> windows instance he
>>> > > launched?
>> > > >
>>> > > In other word different instance owns different
>> password even
>>> > they are
>>> > > launched at the same time? e.g. Input 3 while
>> launching
>>> > instance in
>> > > > Horizon portal for this windows image.
>>> > >
>>> > > If yes, how to send this password to the instance
>> in portal?
>>> > That should
>>> > > be implemented by meta service.
>> > > >
>>> > > If no, all of the instances have the same default
>> password, right?
>>> > >
>>> > >
>>> > > On 1/19/2014 10:02 AM, Jacob Godin wrote:
>> > > > > Weve used sysprep to have the administrator
>> provide a password
>>> > > when the
>>> > > > instance is first booted.
>>> > >
>>
>> We use a simple powershell script that generates a random
>> Administrator password on first boot, pulls the SSH key from the
>> metadata server, encrypts the password with the key and writes the
>> encrypted password to the serial port.
>>
>> The user retrieves the encrypted password through the nova
>> console-log and decrypts it with his private key. The image is setup
>> such that the user is prompted to change the (random) password the
>> first time he logs into the instance.
>>
>> ...Juerg
>>
>>> >
>>> > _______________________________________________
>>> > Mailing list:
>>> >
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack [10]
>> > > Post to : openstack at lists.openstack.org [11]
>>> >
>> > > Unsubscribe :
>>> >
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack [13]
>>> >
>>> >
>> >
>>>
>> > _______________________________________________
>>> Mailing list:
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack [14]
>> > Post to : openstack at lists.openstack.org [15]
>> > Unsubscribe :
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack [16]
>
>
>
> Links:
> ------
> [1] mailto:wantwatering at gmail.com
> [2] https://github.com/jordanrinke/openstack
> [3] http://www.gossamer-threads.com/lists/openstack/operators/
> [4] mailto:wantwatering at gmail.com
> [5] mailto:wantwatering at gmail.com
> [6] mailto:wantwatering at gmail.com
> [7] mailto:wantwatering at gmail.com
> [8] mailto:wantwatering at gmail.com
> [9] mailto:wantwatering at gmail.com
> [10] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> [11] mailto:openstack at lists.openstack.org
> [12] mailto:openstack at lists.openstack.org
> [13] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> [14] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> [15] mailto:openstack at lists.openstack.org
> [16] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> [17] mailto:juergh at gmail.com
--
More information about the Openstack
mailing list