[ASK] Is password server disabled in VPC?

[Rohit Yadav]

Hi,

While testing latest 4.5, I found that VPC routers have ENABLED=0 in
'/etc/default/cloud-passwd-srvr' -- so password server won't run in VPC
VRs to serve for vms/templates that are password enabled.

Is password server disabled by default for VPCs? Is there a way to
enable it; is this a bug or we don't allow password enabled templates in
VPCs?

Regards,
Rohit Yadav
Software Architect, ShapeBlue
M. +91 8826230892 | rohit.ya...@shapeblue.com
Blog: bhaisaab.org | Twitter: @_bhaisaab
PS. If you see any footer below, I did not add it :)
Find out more about ShapeBlue and our range of CloudStack related services

IaaS Cloud Design & Build
CSForge – rapid IaaS deployment framework
CloudStack Consulting
CloudStack Software 
Engineering
CloudStack Infrastructure 
Support
CloudStack Bootcamp Training Courses

This email and any attachments to it may be confidential and are intended solely 
for the use of the individual to whom it is addressed. Any views or opinions 
expressed are solely those of the author and do not necessarily represent those of 
Shape Blue Ltd or related companies. If you are not the intended recipient of this 
email, you must neither take any action based upon its contents, nor copy or show 
it to anyone. Please contact the sender if you believe you have received this email 
in error. Shape Blue Ltd is a company incorporated in England & Wales. 
ShapeBlue Services India LLP is a company incorporated in India and is operated 
under license from Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a company 
incorporated in Brasil and is operated under license from Shape Blue Ltd. ShapeBlue 
SA Pty Ltd is a company registered by The Republic of South Africa and is traded 
under license from Shape Blue Ltd. ShapeBlue is a registered trademark.

Re: [ASK] Is password server disabled in VPC?

[Nux!]

Sounds like a very serious bug. :/
Curios why this happens.

--
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro

- Original Message -
> From: "Rohit Yadav" 
> To: "dev" 
> Sent: Tuesday, 17 March, 2015 09:55:52
> Subject: [ASK] Is password server disabled in VPC?

> Hi,
> 
> While testing latest 4.5, I found that VPC routers have ENABLED=0 in
> '/etc/default/cloud-passwd-srvr' -- so password server won't run in VPC
> VRs to serve for vms/templates that are password enabled.
> 
> Is password server disabled by default for VPCs? Is there a way to
> enable it; is this a bug or we don't allow password enabled templates in
> VPCs?
> 
> Regards,
> Rohit Yadav
> Software Architect, ShapeBlue
> M. +91 8826230892 | rohit.ya...@shapeblue.com
> Blog: bhaisaab.org | Twitter: @_bhaisaab
> PS. If you see any footer below, I did not add it :)
> Find out more about ShapeBlue and our range of CloudStack related services
> 
> IaaS Cloud Design & Build<http://shapeblue.com/iaas-cloud-design-and-build//>
> CSForge – rapid IaaS deployment framework<http://shapeblue.com/csforge/>
> CloudStack Consulting<http://shapeblue.com/cloudstack-consultancy/>
> CloudStack Software
> Engineering<http://shapeblue.com/cloudstack-software-engineering/>
> CloudStack Infrastructure
> Support<http://shapeblue.com/cloudstack-infrastructure-support/>
> CloudStack Bootcamp Training 
> Courses<http://shapeblue.com/cloudstack-training/>
> 
> This email and any attachments to it may be confidential and are intended 
> solely
> for the use of the individual to whom it is addressed. Any views or opinions
> expressed are solely those of the author and do not necessarily represent 
> those
> of Shape Blue Ltd or related companies. If you are not the intended recipient
> of this email, you must neither take any action based upon its contents, nor
> copy or show it to anyone. Please contact the sender if you believe you have
> received this email in error. Shape Blue Ltd is a company incorporated in
> England & Wales. ShapeBlue Services India LLP is a company incorporated in
> India and is operated under license from Shape Blue Ltd. Shape Blue Brasil
> Consultoria Ltda is a company incorporated in Brasil and is operated under
> license from Shape Blue Ltd. ShapeBlue SA Pty Ltd is a company registered by
> The Republic of South Africa and is traded under license from Shape Blue Ltd.
> ShapeBlue is a registered trademark.

Re: [ASK] Is password server disabled in VPC?

[Rohit Yadav]

From the patchsystemvm.sh script looks like the password service is
disabled for VPCs:

https://github.com/apache/cloudstack/blob/4.5/systemvm/patches/debian/config/opt/cloud/bin/patchsystemvm.sh#L109

Anyone has any ideas why we disabled it?

This is similar behaviour on 4.3+ branches, so I guess this is
intentional and not a bug. The side effect is that if I use password
enabled template to create VMs in a VPC tier (whose default password is
not known) I cannot ssh or use it since reset password doesn't work on it.

On Tuesday 17 March 2015 03:25 PM, Rohit Yadav wrote:

Hi,

While testing latest 4.5, I found that VPC routers have ENABLED=0 in
'/etc/default/cloud-passwd-srvr' -- so password server won't run in VPC
VRs to serve for vms/templates that are password enabled.

Is password server disabled by default for VPCs? Is there a way to
enable it; is this a bug or we don't allow password enabled templates in
VPCs?

Regards,
Rohit Yadav
Software Architect, ShapeBlue
M. +91 8826230892 | rohit.ya...@shapeblue.com
Blog: bhaisaab.org | Twitter: @_bhaisaab
PS. If you see any footer below, I did not add it :)
Find out more about ShapeBlue and our range of CloudStack related services

IaaS Cloud Design &
Build
CSForge – rapid IaaS deployment framework
CloudStack Consulting
CloudStack Software
Engineering
CloudStack Infrastructure
Support
CloudStack Bootcamp Training
Courses

This email and any attachments to it may be confidential and are
intended solely for the use of the individual to whom it is addressed.
Any views or opinions expressed are solely those of the author and do
not necessarily represent those of Shape Blue Ltd or related companies.
If you are not the intended recipient of this email, you must neither
take any action based upon its contents, nor copy or show it to anyone.
Please contact the sender if you believe you have received this email in
error. Shape Blue Ltd is a company incorporated in England & Wales.
ShapeBlue Services India LLP is a company incorporated in India and is
operated under license from Shape Blue Ltd. Shape Blue Brasil
Consultoria Ltda is a company incorporated in Brasil and is operated
under license from Shape Blue Ltd. ShapeBlue SA Pty Ltd is a company
registered by The Republic of South Africa and is traded under license
from Shape Blue Ltd. ShapeBlue is a registered trademark.


--
Regards,
Rohit Yadav
Software Architect, ShapeBlue
M. +91 8826230892 | rohit.ya...@shapeblue.com
Blog: bhaisaab.org | Twitter: @_bhaisaab
PS. If you see any footer below, I did not add it :)
Find out more about ShapeBlue and our range of CloudStack related services

IaaS Cloud Design & Build
CSForge – rapid IaaS deployment framework
CloudStack Consulting
CloudStack Software 
Engineering
CloudStack Infrastructure 
Support
CloudStack Bootcamp Training Courses

This email and any attachments to it may be confidential and are intended solely 
for the use of the individual to whom it is addressed. Any views or opinions 
expressed are solely those of the author and do not necessarily represent those of 
Shape Blue Ltd or related companies. If you are not the intended recipient of this 
email, you must neither take any action based upon its contents, nor copy or show 
it to anyone. Please contact the sender if you believe you have received this email 
in error. Shape Blue Ltd is a company incorporated in England & Wales. 
ShapeBlue Services India LLP is a company incorporated in India and is operated 
under license from Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a company 
incorporated in Brasil and is operated under license from Shape Blue Ltd. ShapeBlue 
SA Pty Ltd is a company registered by The Republic of South Africa and is traded 
under license from Shape Blue Ltd. ShapeBlue is a registered trademark.

Re: [ASK] Is password server disabled in VPC?

[Andrija Panic]

Password reset feature works in VPC 4.3.2 and 4.3.0 0 - we are using it in
production.

On 17 March 2015 at 11:07, Rohit Yadav  wrote:

> From the patchsystemvm.sh script looks like the password service is
> disabled for VPCs:
>
> https://github.com/apache/cloudstack/blob/4.5/systemvm/
> patches/debian/config/opt/cloud/bin/patchsystemvm.sh#L109
>
> Anyone has any ideas why we disabled it?
>
> This is similar behaviour on 4.3+ branches, so I guess this is
> intentional and not a bug. The side effect is that if I use password
> enabled template to create VMs in a VPC tier (whose default password is
> not known) I cannot ssh or use it since reset password doesn't work on it.
>
>
> On Tuesday 17 March 2015 03:25 PM, Rohit Yadav wrote:
>
>> Hi,
>>
>> While testing latest 4.5, I found that VPC routers have ENABLED=0 in
>> '/etc/default/cloud-passwd-srvr' -- so password server won't run in VPC
>> VRs to serve for vms/templates that are password enabled.
>>
>> Is password server disabled by default for VPCs? Is there a way to
>> enable it; is this a bug or we don't allow password enabled templates in
>> VPCs?
>>
>> Regards,
>> Rohit Yadav
>> Software Architect, ShapeBlue
>> M. +91 8826230892 | rohit.ya...@shapeblue.com
>> Blog: bhaisaab.org | Twitter: @_bhaisaab
>> PS. If you see any footer below, I did not add it :)
>> Find out more about ShapeBlue and our range of CloudStack related services
>>
>> IaaS Cloud Design &
>> Build
>> CSForge – rapid IaaS deployment framework
>> CloudStack Consulting
>> CloudStack Software
>> Engineering
>> CloudStack Infrastructure
>> Support
>> CloudStack Bootcamp Training
>> Courses
>>
>> This email and any attachments to it may be confidential and are
>> intended solely for the use of the individual to whom it is addressed.
>> Any views or opinions expressed are solely those of the author and do
>> not necessarily represent those of Shape Blue Ltd or related companies.
>> If you are not the intended recipient of this email, you must neither
>> take any action based upon its contents, nor copy or show it to anyone.
>> Please contact the sender if you believe you have received this email in
>> error. Shape Blue Ltd is a company incorporated in England & Wales.
>> ShapeBlue Services India LLP is a company incorporated in India and is
>> operated under license from Shape Blue Ltd. Shape Blue Brasil
>> Consultoria Ltda is a company incorporated in Brasil and is operated
>> under license from Shape Blue Ltd. ShapeBlue SA Pty Ltd is a company
>> registered by The Republic of South Africa and is traded under license
>> from Shape Blue Ltd. ShapeBlue is a registered trademark.
>>
>
> --
>
> Regards,
> Rohit Yadav
> Software Architect, ShapeBlue
> M. +91 8826230892 | rohit.ya...@shapeblue.com
> Blog: bhaisaab.org | Twitter: @_bhaisaab
> PS. If you see any footer below, I did not add it :)
> Find out more about ShapeBlue and our range of CloudStack related services
>
> IaaS Cloud Design & Build iaas-cloud-design-and-build//>
> CSForge – rapid IaaS deployment framework
> CloudStack Consulting
> CloudStack Software Engineering engineering/>
> CloudStack Infrastructure Support cloudstack-infrastructure-support/>
> CloudStack Bootcamp Training Courses cloudstack-training/>
>
> This email and any attachments to it may be confidential and are intended
> solely for the use of the individual to whom it is addressed. Any views or
> opinions expressed are solely those of the author and do not necessarily
> represent those of Shape Blue Ltd or related companies. If you are not the
> intended recipient of this email, you must neither take any action based
> upon its contents, nor copy or show it to anyone. Please contact the sender
> if you believe you have received this email in error. Shape Blue Ltd is a
> company incorporated in England & Wales. ShapeBlue Services India LLP is a
> company incorporated in India and is operated under license from Shape Blue
> Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil
> and is operated under license from Shape Blue Ltd. ShapeBlue SA Pty Ltd is
> a company registered by The Republic of South Africa and is traded under
> license from Shape Blue Ltd. ShapeBlue is a registered trademark.
>



-- 

Andrija Panić

Re: [ASK] Is password server disabled in VPC?

[Rohit Yadav]

Hi Andrija,

Are you sure, on latest 4.3 too it looks like it is one of the disabled 
services, see:

https://github.com/apache/cloudstack/blob/4.3/systemvm/patches/debian/config/opt/cloud/bin/patchsystemvm.sh#L109

(Unless there is some other script enabling/disabling services on VR and I’m 
looking at wrong place.)

If I enable the password server service for VPC, anyone has any objections?

> On 17-Mar-2015, at 3:49 pm, Andrija Panic  wrote:
>
> Password reset feature works in VPC 4.3.2 and 4.3.0 0 - we are using it in
> production.
>
> On 17 March 2015 at 11:07, Rohit Yadav  wrote:
>
>> From the patchsystemvm.sh script looks like the password service is
>> disabled for VPCs:
>>
>> https://github.com/apache/cloudstack/blob/4.5/systemvm/
>> patches/debian/config/opt/cloud/bin/patchsystemvm.sh#L109
>>
>> Anyone has any ideas why we disabled it?
>>
>> This is similar behaviour on 4.3+ branches, so I guess this is
>> intentional and not a bug. The side effect is that if I use password
>> enabled template to create VMs in a VPC tier (whose default password is
>> not known) I cannot ssh or use it since reset password doesn't work on it.
>>
>>
>> On Tuesday 17 March 2015 03:25 PM, Rohit Yadav wrote:
>>
>>> Hi,
>>>
>>> While testing latest 4.5, I found that VPC routers have ENABLED=0 in
>>> '/etc/default/cloud-passwd-srvr' -- so password server won't run in VPC
>>> VRs to serve for vms/templates that are password enabled.
>>>
>>> Is password server disabled by default for VPCs? Is there a way to
>>> enable it; is this a bug or we don't allow password enabled templates in
>>> VPCs?
>>>
>>> Regards,
>>> Rohit Yadav
>>> Software Architect, ShapeBlue
>>> M. +91 8826230892 | rohit.ya...@shapeblue.com
>>> Blog: bhaisaab.org | Twitter: @_bhaisaab
>>> PS. If you see any footer below, I did not add it :)
>>> Find out more about ShapeBlue and our range of CloudStack related services
>>>
>>> IaaS Cloud Design &
>>> Build
>>> CSForge – rapid IaaS deployment framework
>>> CloudStack Consulting
>>> CloudStack Software
>>> Engineering
>>> CloudStack Infrastructure
>>> Support
>>> CloudStack Bootcamp Training
>>> Courses
>>>
>>> This email and any attachments to it may be confidential and are
>>> intended solely for the use of the individual to whom it is addressed.
>>> Any views or opinions expressed are solely those of the author and do
>>> not necessarily represent those of Shape Blue Ltd or related companies.
>>> If you are not the intended recipient of this email, you must neither
>>> take any action based upon its contents, nor copy or show it to anyone.
>>> Please contact the sender if you believe you have received this email in
>>> error. Shape Blue Ltd is a company incorporated in England & Wales.
>>> ShapeBlue Services India LLP is a company incorporated in India and is
>>> operated under license from Shape Blue Ltd. Shape Blue Brasil
>>> Consultoria Ltda is a company incorporated in Brasil and is operated
>>> under license from Shape Blue Ltd. ShapeBlue SA Pty Ltd is a company
>>> registered by The Republic of South Africa and is traded under license
>>> from Shape Blue Ltd. ShapeBlue is a registered trademark.
>>>
>>
>> --
>>
>> Regards,
>> Rohit Yadav
>> Software Architect, ShapeBlue
>> M. +91 8826230892 | rohit.ya...@shapeblue.com
>> Blog: bhaisaab.org | Twitter: @_bhaisaab
>> PS. If you see any footer below, I did not add it :)
>> Find out more about ShapeBlue and our range of CloudStack related services
>>
>> IaaS Cloud Design & Build> iaas-cloud-design-and-build//>
>> CSForge – rapid IaaS deployment framework
>> CloudStack Consulting
>> CloudStack Software Engineering> engineering/>
>> CloudStack Infrastructure Support> cloudstack-infrastructure-support/>
>> CloudStack Bootcamp Training Courses> cloudstack-training/>
>>
>> This email and any attachments to it may be confidential and are intended
>> solely for the use of the individual to whom it is addressed. Any views or
>> opinions expressed are solely those of the author and do not necessarily
>> represent those of Shape Blue Ltd or related companies. If you are not the
>> intended recipient of this email, you must neither take any action based
>> upon its contents, nor copy or show it to anyone. Please contact the sender
>> if you believe you have received this email in error. Shape Blue Ltd is a
>> company incorporated in England & Wales. ShapeBlue Services India LLP is a
>> company incorporated in India and is operated under license from Shape Blue
>> Ltd. Shape Blue Brasil Consultoria 

Re: [ASK] Is password server disabled in VPC?

[Andrija Panic]

Now I'm geting nervous :(   If user data is enabled for network offering,
it DID work in 4.3.0 (this was upgrade from 4.2, 4,0...)

I'm testing now with 4.3.2 - this is serious if broken now..

@Rohit - where is patch from 4.3.0 or 4.3.2 ?

On 17 March 2015 at 12:04, Rohit Yadav  wrote:

> Hi Andrija,
>
> Are you sure, on latest 4.3 too it looks like it is one of the disabled
> services, see:
>
>
> https://github.com/apache/cloudstack/blob/4.3/systemvm/patches/debian/config/opt/cloud/bin/patchsystemvm.sh#L109
>
> (Unless there is some other script enabling/disabling services on VR and
> I’m looking at wrong place.)
>
> If I enable the password server service for VPC, anyone has any objections?
>
> > On 17-Mar-2015, at 3:49 pm, Andrija Panic 
> wrote:
> >
> > Password reset feature works in VPC 4.3.2 and 4.3.0 0 - we are using it
> in
> > production.
> >
> > On 17 March 2015 at 11:07, Rohit Yadav 
> wrote:
> >
> >> From the patchsystemvm.sh script looks like the password service is
> >> disabled for VPCs:
> >>
> >> https://github.com/apache/cloudstack/blob/4.5/systemvm/
> >> patches/debian/config/opt/cloud/bin/patchsystemvm.sh#L109
> >>
> >> Anyone has any ideas why we disabled it?
> >>
> >> This is similar behaviour on 4.3+ branches, so I guess this is
> >> intentional and not a bug. The side effect is that if I use password
> >> enabled template to create VMs in a VPC tier (whose default password is
> >> not known) I cannot ssh or use it since reset password doesn't work on
> it.
> >>
> >>
> >> On Tuesday 17 March 2015 03:25 PM, Rohit Yadav wrote:
> >>
> >>> Hi,
> >>>
> >>> While testing latest 4.5, I found that VPC routers have ENABLED=0 in
> >>> '/etc/default/cloud-passwd-srvr' -- so password server won't run in VPC
> >>> VRs to serve for vms/templates that are password enabled.
> >>>
> >>> Is password server disabled by default for VPCs? Is there a way to
> >>> enable it; is this a bug or we don't allow password enabled templates
> in
> >>> VPCs?
> >>>
> >>> Regards,
> >>> Rohit Yadav
> >>> Software Architect, ShapeBlue
> >>> M. +91 8826230892 | rohit.ya...@shapeblue.com
> >>> Blog: bhaisaab.org | Twitter: @_bhaisaab
> >>> PS. If you see any footer below, I did not add it :)
> >>> Find out more about ShapeBlue and our range of CloudStack related
> services
> >>>
> >>> IaaS Cloud Design &
> >>> Build
> >>> CSForge – rapid IaaS deployment framework<
> http://shapeblue.com/csforge/>
> >>> CloudStack Consulting
> >>> CloudStack Software
> >>> Engineering
> >>> CloudStack Infrastructure
> >>> Support
> >>> CloudStack Bootcamp Training
> >>> Courses
> >>>
> >>> This email and any attachments to it may be confidential and are
> >>> intended solely for the use of the individual to whom it is addressed.
> >>> Any views or opinions expressed are solely those of the author and do
> >>> not necessarily represent those of Shape Blue Ltd or related companies.
> >>> If you are not the intended recipient of this email, you must neither
> >>> take any action based upon its contents, nor copy or show it to anyone.
> >>> Please contact the sender if you believe you have received this email
> in
> >>> error. Shape Blue Ltd is a company incorporated in England & Wales.
> >>> ShapeBlue Services India LLP is a company incorporated in India and is
> >>> operated under license from Shape Blue Ltd. Shape Blue Brasil
> >>> Consultoria Ltda is a company incorporated in Brasil and is operated
> >>> under license from Shape Blue Ltd. ShapeBlue SA Pty Ltd is a company
> >>> registered by The Republic of South Africa and is traded under license
> >>> from Shape Blue Ltd. ShapeBlue is a registered trademark.
> >>>
> >>
> >> --
> >>
> >> Regards,
> >> Rohit Yadav
> >> Software Architect, ShapeBlue
> >> M. +91 8826230892 | rohit.ya...@shapeblue.com
> >> Blog: bhaisaab.org | Twitter: @_bhaisaab
> >> PS. If you see any footer below, I did not add it :)
> >> Find out more about ShapeBlue and our range of CloudStack related
> services
> >>
> >> IaaS Cloud Design & Build >> iaas-cloud-design-and-build//>
> >> CSForge – rapid IaaS deployment framework >
> >> CloudStack Consulting
> >> CloudStack Software Engineering<
> http://shapeblue.com/cloudstack-software-
> >> engineering/>
> >> CloudStack Infrastructure Support >> cloudstack-infrastructure-support/>
> >> CloudStack Bootcamp Training Courses >> cloudstack-training/>
> >>
> >> This email and any attachments to it may be confidential and are
> intended
> >> solely for the use of the individual to whom it is addressed. Any views
> or
> >> opinions expressed are solely those of the author and do 

Re: [ASK] Is password server disabled in VPC?

[Ian Southam]

Password server is run in vpc via vpc_passwd_server a little wrapper script 
that is kicked off on guest network creation by vpc_guestnw.sh

It does not use the service start/stop mechanism.

—
Ian


On 17 Mar 2015, at 12:04, Rohit Yadav  wrote:

> Hi Andrija,
> 
> Are you sure, on latest 4.3 too it looks like it is one of the disabled 
> services, see:
> 
> https://github.com/apache/cloudstack/blob/4.3/systemvm/patches/debian/config/opt/cloud/bin/patchsystemvm.sh#L109
> 
> (Unless there is some other script enabling/disabling services on VR and I’m 
> looking at wrong place.)
> 
> If I enable the password server service for VPC, anyone has any objections?
> 
>> On 17-Mar-2015, at 3:49 pm, Andrija Panic  wrote:
>> 
>> Password reset feature works in VPC 4.3.2 and 4.3.0 0 - we are using it in
>> production.
>> 
>> On 17 March 2015 at 11:07, Rohit Yadav  wrote:
>> 
>>> From the patchsystemvm.sh script looks like the password service is
>>> disabled for VPCs:
>>> 
>>> https://github.com/apache/cloudstack/blob/4.5/systemvm/
>>> patches/debian/config/opt/cloud/bin/patchsystemvm.sh#L109
>>> 
>>> Anyone has any ideas why we disabled it?
>>> 
>>> This is similar behaviour on 4.3+ branches, so I guess this is
>>> intentional and not a bug. The side effect is that if I use password
>>> enabled template to create VMs in a VPC tier (whose default password is
>>> not known) I cannot ssh or use it since reset password doesn't work on it.
>>> 
>>> 
>>> On Tuesday 17 March 2015 03:25 PM, Rohit Yadav wrote:
>>> 
 Hi,
 
 While testing latest 4.5, I found that VPC routers have ENABLED=0 in
 '/etc/default/cloud-passwd-srvr' -- so password server won't run in VPC
 VRs to serve for vms/templates that are password enabled.
 
 Is password server disabled by default for VPCs? Is there a way to
 enable it; is this a bug or we don't allow password enabled templates in
 VPCs?
 
 Regards,
 Rohit Yadav
 Software Architect, ShapeBlue
 M. +91 8826230892 | rohit.ya...@shapeblue.com
 Blog: bhaisaab.org | Twitter: @_bhaisaab
 PS. If you see any footer below, I did not add it :)
 Find out more about ShapeBlue and our range of CloudStack related services
 
 IaaS Cloud Design &
 Build
 CSForge – rapid IaaS deployment framework
 CloudStack Consulting
 CloudStack Software
 Engineering
 CloudStack Infrastructure
 Support
 CloudStack Bootcamp Training
 Courses
 
 This email and any attachments to it may be confidential and are
 intended solely for the use of the individual to whom it is addressed.
 Any views or opinions expressed are solely those of the author and do
 not necessarily represent those of Shape Blue Ltd or related companies.
 If you are not the intended recipient of this email, you must neither
 take any action based upon its contents, nor copy or show it to anyone.
 Please contact the sender if you believe you have received this email in
 error. Shape Blue Ltd is a company incorporated in England & Wales.
 ShapeBlue Services India LLP is a company incorporated in India and is
 operated under license from Shape Blue Ltd. Shape Blue Brasil
 Consultoria Ltda is a company incorporated in Brasil and is operated
 under license from Shape Blue Ltd. ShapeBlue SA Pty Ltd is a company
 registered by The Republic of South Africa and is traded under license
 from Shape Blue Ltd. ShapeBlue is a registered trademark.
 
>>> 
>>> --
>>> 
>>> Regards,
>>> Rohit Yadav
>>> Software Architect, ShapeBlue
>>> M. +91 8826230892 | rohit.ya...@shapeblue.com
>>> Blog: bhaisaab.org | Twitter: @_bhaisaab
>>> PS. If you see any footer below, I did not add it :)
>>> Find out more about ShapeBlue and our range of CloudStack related services
>>> 
>>> IaaS Cloud Design & Build>> iaas-cloud-design-and-build//>
>>> CSForge – rapid IaaS deployment framework
>>> CloudStack Consulting
>>> CloudStack Software Engineering>> engineering/>
>>> CloudStack Infrastructure Support>> cloudstack-infrastructure-support/>
>>> CloudStack Bootcamp Training Courses>> cloudstack-training/>
>>> 
>>> This email and any attachments to it may be confidential and are intended
>>> solely for the use of the individual to whom it is addressed. Any views or
>>> opinions expressed are solely those of the author and do not necessarily
>>> represent those of Shape Blue Ltd or related companies. If you are not the
>>> intended recipient of this email, you mu

Re: [ASK] Is password server disabled in VPC?

[Nux!]

Do enable it please, lack of it would break a lot of expectations.
I am planning to use VPC in production and this feature is a must.

Lucian

--
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro

- Original Message -
> From: "Rohit Yadav" 
> To: dev@cloudstack.apache.org
> Sent: Tuesday, 17 March, 2015 11:04:41
> Subject: Re: [ASK] Is password server disabled in VPC?

> Hi Andrija,
> 
> Are you sure, on latest 4.3 too it looks like it is one of the disabled
> services, see:
> 
> https://github.com/apache/cloudstack/blob/4.3/systemvm/patches/debian/config/opt/cloud/bin/patchsystemvm.sh#L109
> 
> (Unless there is some other script enabling/disabling services on VR and I’m
> looking at wrong place.)
> 
> If I enable the password server service for VPC, anyone has any objections?

Re: [ASK] Is password server disabled in VPC?

[Andrija Panic]

I confirm it still does work on 4.3.2 - I have User Data enabled on the
network offerings, which I beleive is an requirement.


On 17 March 2015 at 12:55, Ian Southam  wrote:

> Password server is run in vpc via vpc_passwd_server a little wrapper
> script that is kicked off on guest network creation by vpc_guestnw.sh
>
> It does not use the service start/stop mechanism.
>
> —
> Ian
>
>
> On 17 Mar 2015, at 12:04, Rohit Yadav  wrote:
>
> > Hi Andrija,
> >
> > Are you sure, on latest 4.3 too it looks like it is one of the disabled
> services, see:
> >
> >
> https://github.com/apache/cloudstack/blob/4.3/systemvm/patches/debian/config/opt/cloud/bin/patchsystemvm.sh#L109
> >
> > (Unless there is some other script enabling/disabling services on VR and
> I’m looking at wrong place.)
> >
> > If I enable the password server service for VPC, anyone has any
> objections?
> >
> >> On 17-Mar-2015, at 3:49 pm, Andrija Panic 
> wrote:
> >>
> >> Password reset feature works in VPC 4.3.2 and 4.3.0 0 - we are using it
> in
> >> production.
> >>
> >> On 17 March 2015 at 11:07, Rohit Yadav 
> wrote:
> >>
> >>> From the patchsystemvm.sh script looks like the password service is
> >>> disabled for VPCs:
> >>>
> >>> https://github.com/apache/cloudstack/blob/4.5/systemvm/
> >>> patches/debian/config/opt/cloud/bin/patchsystemvm.sh#L109
> >>>
> >>> Anyone has any ideas why we disabled it?
> >>>
> >>> This is similar behaviour on 4.3+ branches, so I guess this is
> >>> intentional and not a bug. The side effect is that if I use password
> >>> enabled template to create VMs in a VPC tier (whose default password is
> >>> not known) I cannot ssh or use it since reset password doesn't work on
> it.
> >>>
> >>>
> >>> On Tuesday 17 March 2015 03:25 PM, Rohit Yadav wrote:
> >>>
>  Hi,
> 
>  While testing latest 4.5, I found that VPC routers have ENABLED=0 in
>  '/etc/default/cloud-passwd-srvr' -- so password server won't run in
> VPC
>  VRs to serve for vms/templates that are password enabled.
> 
>  Is password server disabled by default for VPCs? Is there a way to
>  enable it; is this a bug or we don't allow password enabled templates
> in
>  VPCs?
> 
>  Regards,
>  Rohit Yadav
>  Software Architect, ShapeBlue
>  M. +91 8826230892 | rohit.ya...@shapeblue.com
>  Blog: bhaisaab.org | Twitter: @_bhaisaab
>  PS. If you see any footer below, I did not add it :)
>  Find out more about ShapeBlue and our range of CloudStack related
> services
> 
>  IaaS Cloud Design &
>  Build
>  CSForge – rapid IaaS deployment framework<
> http://shapeblue.com/csforge/>
>  CloudStack Consulting
>  CloudStack Software
>  Engineering
>  CloudStack Infrastructure
>  Support
>  CloudStack Bootcamp Training
>  Courses
> 
>  This email and any attachments to it may be confidential and are
>  intended solely for the use of the individual to whom it is addressed.
>  Any views or opinions expressed are solely those of the author and do
>  not necessarily represent those of Shape Blue Ltd or related
> companies.
>  If you are not the intended recipient of this email, you must neither
>  take any action based upon its contents, nor copy or show it to
> anyone.
>  Please contact the sender if you believe you have received this email
> in
>  error. Shape Blue Ltd is a company incorporated in England & Wales.
>  ShapeBlue Services India LLP is a company incorporated in India and is
>  operated under license from Shape Blue Ltd. Shape Blue Brasil
>  Consultoria Ltda is a company incorporated in Brasil and is operated
>  under license from Shape Blue Ltd. ShapeBlue SA Pty Ltd is a company
>  registered by The Republic of South Africa and is traded under license
>  from Shape Blue Ltd. ShapeBlue is a registered trademark.
> 
> >>>
> >>> --
> >>>
> >>> Regards,
> >>> Rohit Yadav
> >>> Software Architect, ShapeBlue
> >>> M. +91 8826230892 | rohit.ya...@shapeblue.com
> >>> Blog: bhaisaab.org | Twitter: @_bhaisaab
> >>> PS. If you see any footer below, I did not add it :)
> >>> Find out more about ShapeBlue and our range of CloudStack related
> services
> >>>
> >>> IaaS Cloud Design & Build >>> iaas-cloud-design-and-build//>
> >>> CSForge – rapid IaaS deployment framework<
> http://shapeblue.com/csforge/>
> >>> CloudStack Consulting
> >>> CloudStack Software Engineering<
> http://shapeblue.com/cloudstack-software-
> >>> engineering/>
> >>> CloudStack Infrastructure Support >>> cloudstack-infrastructure-support/>
> >>> CloudStack Bootcamp Training Courses

Re: [ASK] Is password server disabled in VPC?

[Andrija Panic]

Lucian,
it does work for me - unless I didnt understand orginal problem - I get
password, and this password is set inside VM via the cloud-set-password...
script

On 17 March 2015 at 12:56, Nux!  wrote:

> Do enable it please, lack of it would break a lot of expectations.
> I am planning to use VPC in production and this feature is a must.
>
> Lucian
>
> --
> Sent from the Delta quadrant using Borg technology!
>
> Nux!
> www.nux.ro
>
> - Original Message -
> > From: "Rohit Yadav" 
> > To: dev@cloudstack.apache.org
> > Sent: Tuesday, 17 March, 2015 11:04:41
> > Subject: Re: [ASK] Is password server disabled in VPC?
>
> > Hi Andrija,
> >
> > Are you sure, on latest 4.3 too it looks like it is one of the disabled
> > services, see:
> >
> >
> https://github.com/apache/cloudstack/blob/4.3/systemvm/patches/debian/config/opt/cloud/bin/patchsystemvm.sh#L109
> >
> > (Unless there is some other script enabling/disabling services on VR and
> I’m
> > looking at wrong place.)
> >
> > If I enable the password server service for VPC, anyone has any
> objections?
>



-- 

Andrija Panić

Re: [ASK] Is password server disabled in VPC?

[Nux!]

Awesome then. Thanks for confirming.

Looks like Rohit managed to get us to panic. Again! :-)

Lucian

--
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro

- Original Message -
> From: "Andrija Panic" 
> To: dev@cloudstack.apache.org
> Sent: Tuesday, 17 March, 2015 12:02:18
> Subject: Re: [ASK] Is password server disabled in VPC?

> Lucian,
> it does work for me - unless I didnt understand orginal problem - I get
> password, and this password is set inside VM via the cloud-set-password...
> script
> 
> On 17 March 2015 at 12:56, Nux!  wrote:
> 
>> Do enable it please, lack of it would break a lot of expectations.
>> I am planning to use VPC in production and this feature is a must.
>>
>> Lucian
>>
>> --
>> Sent from the Delta quadrant using Borg technology!
>>
>> Nux!
>> www.nux.ro
>>
>> - Original Message -
>> > From: "Rohit Yadav" 
>> > To: dev@cloudstack.apache.org
>> > Sent: Tuesday, 17 March, 2015 11:04:41
>> > Subject: Re: [ASK] Is password server disabled in VPC?
>>
>> > Hi Andrija,
>> >
>> > Are you sure, on latest 4.3 too it looks like it is one of the disabled
>> > services, see:
>> >
>> >
>> https://github.com/apache/cloudstack/blob/4.3/systemvm/patches/debian/config/opt/cloud/bin/patchsystemvm.sh#L109
>> >
>> > (Unless there is some other script enabling/disabling services on VR and
>> I’m
>> > looking at wrong place.)
>> >
>> > If I enable the password server service for VPC, anyone has any
>> objections?
>>
> 
> 
> 
> --
> 
> Andrija Panić

Re: [ASK] Is password server disabled in VPC?

[Andrija Panic]

It will be all forgiven :) - if I can see real Remote IP on the internal
VM, that is behind VPC - just asked for some help of you guys in new thread
!

Thanks

On 17 March 2015 at 13:55, Nux!  wrote:

> Awesome then. Thanks for confirming.
>
> Looks like Rohit managed to get us to panic. Again! :-)
>
> Lucian
>
> --
> Sent from the Delta quadrant using Borg technology!
>
> Nux!
> www.nux.ro
>
> - Original Message -
> > From: "Andrija Panic" 
> > To: dev@cloudstack.apache.org
> > Sent: Tuesday, 17 March, 2015 12:02:18
> > Subject: Re: [ASK] Is password server disabled in VPC?
>
> > Lucian,
> > it does work for me - unless I didnt understand orginal problem - I get
> > password, and this password is set inside VM via the
> cloud-set-password...
> > script
> >
> > On 17 March 2015 at 12:56, Nux!  wrote:
> >
> >> Do enable it please, lack of it would break a lot of expectations.
> >> I am planning to use VPC in production and this feature is a must.
> >>
> >> Lucian
> >>
> >> --
> >> Sent from the Delta quadrant using Borg technology!
> >>
> >> Nux!
> >> www.nux.ro
> >>
> >> - Original Message -
> >> > From: "Rohit Yadav" 
> >> > To: dev@cloudstack.apache.org
> >> > Sent: Tuesday, 17 March, 2015 11:04:41
> >> > Subject: Re: [ASK] Is password server disabled in VPC?
> >>
> >> > Hi Andrija,
> >> >
> >> > Are you sure, on latest 4.3 too it looks like it is one of the
> disabled
> >> > services, see:
> >> >
> >> >
> >>
> https://github.com/apache/cloudstack/blob/4.3/systemvm/patches/debian/config/opt/cloud/bin/patchsystemvm.sh#L109
> >> >
> >> > (Unless there is some other script enabling/disabling services on VR
> and
> >> I’m
> >> > looking at wrong place.)
> >> >
> >> > If I enable the password server service for VPC, anyone has any
> >> objections?
> >>
> >
> >
> >
> > --
> >
> > Andrija Panić
>



-- 

Andrija Panić

Re: [ASK] Is password server disabled in VPC?

[Pierre-Luc Dion]

Just to confirm, I've ran a lot of tests against 4.5-rc3, using password
enabled templates inside VPC and it all work perfectly, including userdata
and sshkey, ssh reset, password reset,...




On Tue, Mar 17, 2015 at 9:03 AM, Andrija Panic 
wrote:

> It will be all forgiven :) - if I can see real Remote IP on the internal
> VM, that is behind VPC - just asked for some help of you guys in new thread
> !
>
> Thanks
>
> On 17 March 2015 at 13:55, Nux!  wrote:
>
> > Awesome then. Thanks for confirming.
> >
> > Looks like Rohit managed to get us to panic. Again! :-)
> >
> > Lucian
> >
> > --
> > Sent from the Delta quadrant using Borg technology!
> >
> > Nux!
> > www.nux.ro
> >
> > - Original Message -
> > > From: "Andrija Panic" 
> > > To: dev@cloudstack.apache.org
> > > Sent: Tuesday, 17 March, 2015 12:02:18
> > > Subject: Re: [ASK] Is password server disabled in VPC?
> >
> > > Lucian,
> > > it does work for me - unless I didnt understand orginal problem - I get
> > > password, and this password is set inside VM via the
> > cloud-set-password...
> > > script
> > >
> > > On 17 March 2015 at 12:56, Nux!  wrote:
> > >
> > >> Do enable it please, lack of it would break a lot of expectations.
> > >> I am planning to use VPC in production and this feature is a must.
> > >>
> > >> Lucian
> > >>
> > >> --
> > >> Sent from the Delta quadrant using Borg technology!
> > >>
> > >> Nux!
> > >> www.nux.ro
> > >>
> > >> - Original Message -
> > >> > From: "Rohit Yadav" 
> > >> > To: dev@cloudstack.apache.org
> > >> > Sent: Tuesday, 17 March, 2015 11:04:41
> > >> > Subject: Re: [ASK] Is password server disabled in VPC?
> > >>
> > >> > Hi Andrija,
> > >> >
> > >> > Are you sure, on latest 4.3 too it looks like it is one of the
> > disabled
> > >> > services, see:
> > >> >
> > >> >
> > >>
> >
> https://github.com/apache/cloudstack/blob/4.3/systemvm/patches/debian/config/opt/cloud/bin/patchsystemvm.sh#L109
> > >> >
> > >> > (Unless there is some other script enabling/disabling services on VR
> > and
> > >> I’m
> > >> > looking at wrong place.)
> > >> >
> > >> > If I enable the password server service for VPC, anyone has any
> > >> objections?
> > >>
> > >
> > >
> > >
> > > --
> > >
> > > Andrija Panić
> >
>
>
>
> --
>
> Andrija Panić
>

Re: [ASK] Is password server disabled in VPC?

[Rohit Yadav]

Thanks Ian!

> On 17-Mar-2015, at 5:25 pm, Ian Southam  wrote:
>
> Password server is run in vpc via vpc_passwd_server a little wrapper script 
> that is kicked off on guest network creation by vpc_guestnw.sh

Thanks for sharing, this was the reason it was failing for me as the improved 
Python based password server was not being used in the vpc’s passwd_server 
scripts.

Regards,
Rohit Yadav
Software Architect, ShapeBlue
M. +91 88 262 30892 | rohit.ya...@shapeblue.com
Blog: bhaisaab.org | Twitter: @_bhaisaab



Find out more about ShapeBlue and our range of CloudStack related services

IaaS Cloud Design & Build
CSForge – rapid IaaS deployment framework
CloudStack Consulting
CloudStack Software 
Engineering
CloudStack Infrastructure 
Support
CloudStack Bootcamp Training Courses

This email and any attachments to it may be confidential and are intended 
solely for the use of the individual to whom it is addressed. Any views or 
opinions expressed are solely those of the author and do not necessarily 
represent those of Shape Blue Ltd or related companies. If you are not the 
intended recipient of this email, you must neither take any action based upon 
its contents, nor copy or show it to anyone. Please contact the sender if you 
believe you have received this email in error. Shape Blue Ltd is a company 
incorporated in England & Wales. ShapeBlue Services India LLP is a company 
incorporated in India and is operated under license from Shape Blue Ltd. Shape 
Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is 
operated under license from Shape Blue Ltd. ShapeBlue SA Pty Ltd is a company 
registered by The Republic of South Africa and is traded under license from 
Shape Blue Ltd. ShapeBlue is a registered trademark.

Re: [ASK] Is password server disabled in VPC?

[Rohit Yadav]

Hi all,

> On 17-Mar-2015, at 6:25 pm, Nux!  wrote:
>
> Looks like Rohit managed to get us to panic. Again! :-)

Sorry for the issue, I did n’t mean to cause any panic :) It was a bug which 
caused the password server to not start. After Ian pointed out how it works for 
VPCs I was able to fix it.

Regards,
Rohit Yadav
Software Architect, ShapeBlue
M. +91 88 262 30892 | rohit.ya...@shapeblue.com
Blog: bhaisaab.org | Twitter: @_bhaisaab



Find out more about ShapeBlue and our range of CloudStack related services

IaaS Cloud Design & Build
CSForge – rapid IaaS deployment framework
CloudStack Consulting
CloudStack Software 
Engineering
CloudStack Infrastructure 
Support
CloudStack Bootcamp Training Courses

This email and any attachments to it may be confidential and are intended 
solely for the use of the individual to whom it is addressed. Any views or 
opinions expressed are solely those of the author and do not necessarily 
represent those of Shape Blue Ltd or related companies. If you are not the 
intended recipient of this email, you must neither take any action based upon 
its contents, nor copy or show it to anyone. Please contact the sender if you 
believe you have received this email in error. Shape Blue Ltd is a company 
incorporated in England & Wales. ShapeBlue Services India LLP is a company 
incorporated in India and is operated under license from Shape Blue Ltd. Shape 
Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is 
operated under license from Shape Blue Ltd. ShapeBlue SA Pty Ltd is a company 
registered by The Republic of South Africa and is traded under license from 
Shape Blue Ltd. ShapeBlue is a registered trademark.

Re: [ASK] Is password server disabled in VPC?

[Nux!]

I was kidding, Rohit. Good job :)

--
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro

- Original Message -
> From: "Rohit Yadav" 
> To: dev@cloudstack.apache.org
> Sent: Wednesday, 18 March, 2015 05:16:09
> Subject: Re: [ASK] Is password server disabled in VPC?

> Hi all,
> 
>> On 17-Mar-2015, at 6:25 pm, Nux!  wrote:
>>
>> Looks like Rohit managed to get us to panic. Again! :-)
> 
> Sorry for the issue, I did n’t mean to cause any panic :) It was a bug which
> caused the password server to not start. After Ian pointed out how it works 
> for
> VPCs I was able to fix it.
> 
> Regards,
> Rohit Yadav
> Software Architect, ShapeBlue
> M. +91 88 262 30892 | rohit.ya...@shapeblue.com
> Blog: bhaisaab.org | Twitter: @_bhaisaab
> 
> 
> 
> Find out more about ShapeBlue and our range of CloudStack related services
> 
> IaaS Cloud Design & Build<http://shapeblue.com/iaas-cloud-design-and-build//>
> CSForge – rapid IaaS deployment framework<http://shapeblue.com/csforge/>
> CloudStack Consulting<http://shapeblue.com/cloudstack-consultancy/>
> CloudStack Software
> Engineering<http://shapeblue.com/cloudstack-software-engineering/>
> CloudStack Infrastructure
> Support<http://shapeblue.com/cloudstack-infrastructure-support/>
> CloudStack Bootcamp Training 
> Courses<http://shapeblue.com/cloudstack-training/>
> 
> This email and any attachments to it may be confidential and are intended 
> solely
> for the use of the individual to whom it is addressed. Any views or opinions
> expressed are solely those of the author and do not necessarily represent 
> those
> of Shape Blue Ltd or related companies. If you are not the intended recipient
> of this email, you must neither take any action based upon its contents, nor
> copy or show it to anyone. Please contact the sender if you believe you have
> received this email in error. Shape Blue Ltd is a company incorporated in
> England & Wales. ShapeBlue Services India LLP is a company incorporated in
> India and is operated under license from Shape Blue Ltd. Shape Blue Brasil
> Consultoria Ltda is a company incorporated in Brasil and is operated under
> license from Shape Blue Ltd. ShapeBlue SA Pty Ltd is a company registered by
> The Republic of South Africa and is traded under license from Shape Blue Ltd.
> ShapeBlue is a registered trademark.