Ask Your Question
1

Disable admin user on horizon

asked 2015-02-09 09:01:14 -0500

Steve gravatar image

How to disable admin user and all the superusers on horizon?

My goal is to separate tenant users login portal from admin login portal. I have removed "admin" dashboard on horizon. For security reason, I would like to disable superusers get a token, and not able to login the "project" dashboard and any other resources. These superusers are totally limited the access on horizon. I am using icehouse, on ubuntu 14.04.

Thanks!

edit retag flag offensive close merge delete

Comments

How have you managed to remove admin dashboard from Horizon? We have removed all /usr/share/openstack-dashboard/openstack_dashboard/enabled/admin files but the main menu dissapears as well. Thanks.

josecastillolema gravatar imagejosecastillolema ( 2018-05-25 11:43:43 -0500 )edit

2 answers

Sort by ยป oldest newest most voted
2

answered 2015-02-10 06:00:58 -0500

jdiaz9 gravatar image

You can try an go straight into the keystone database and remove the admin user's project (tenant). Fill it with null or something of that nature. You can always go back and fill it in. This way you bypass the keystone API all together.

edit flag offensive delete link more
1

answered 2015-02-10 04:36:00 -0500

Vinoth gravatar image

updated 2015-02-10 04:38:37 -0500

Not for sure, Just an idea.

Skip the below step while configuring the admin user.

4) You must now link the admin user, admin role, and admin tenant together using the user-role-add option:

$ keystone user-role-add --user=admin --tenant=admin --role=admin

Skiping this step will make the admin user to have no tenant associated with it.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2015-02-09 09:01:14 -0500

Seen: 499 times

Last updated: Feb 10 '15