Changes between Version 33 and Version 34 of GENIRacksHome/InstageniRacks/AcceptanceTestStatus/IG-EXP-2

Timestamp:

06/01/12 11:04:36 (12 years ago)

Author:

lnevers@bbn.com

Comment:

--

GENIRacksHome/InstageniRacks/AcceptanceTestStatus/IG-EXP-2

@@ -287 +287 @@
 }}}
 
-== Step 16. Verify that experimenters 1 and 2 cannot use the control plane to access each other's resources (e.g. via unauthenticated SSH, shared writable filesystem mount) == 
+== Step 16. Verify that experimenters 1 and 2 cannot use the control plane to access each other's resources ==
+Verified network access from hostx to host2:
+{{{
+hostx:~% ifconfig eth0
+eth0      Link encap:Ethernet  HWaddr e8:39:35:b1:ec:9c  
+          inet addr:155.98.34.14  Bcast:155.98.34.255  Mask:255.255.255.0
+          inet6 addr: fe80::ea39:35ff:feb1:ec9c/64 Scope:Link
+          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
+          RX packets:952 errors:0 dropped:0 overruns:0 frame:0
+          TX packets:669 errors:0 dropped:0 overruns:0 carrier:0
+          collisions:0 txqueuelen:1000 
+          RX bytes:91246 (91.2 KB)  TX bytes:84542 (84.5 KB)
+          Interrupt:30 Memory:f4000000-f4012800 
+
+hostx:~% ping -c 1 172.17.5.4
+PING 172.17.5.4 (172.17.5.4) 56(84) bytes of data.
+
+--- 172.17.5.4 ping statistics ---
+1 packets transmitted, 0 received, 100% packet loss, time 0ms
+
+hostx:~% 
+}}}
+Verified network access from host2 to hostx:
+{{{
+[lnevers@host2 ~]$ /sbin/ifconfig eth999
+eth999    Link encap:Ethernet  HWaddr 00:00:AC:11:05:04  
+          inet addr:172.17.5.4  Bcast:172.31.255.255  Mask:255.240.0.0
+          inet6 addr: fe80::200:acff:fe11:504/64 Scope:Link
+          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
+          RX packets:1977 errors:0 dropped:0 overruns:0 frame:0
+          TX packets:1873 errors:0 dropped:0 overruns:0 carrier:0
+          collisions:0 txqueuelen:0 
+          RX bytes:122593 (119.7 KiB)  TX bytes:262672 (256.5 KiB)
+
+[lnevers@host2 ~]$ ping -c 1 155.98.34.14
+PING 155.98.34.14 (155.98.34.14) 56(84) bytes of data.
+
+--- 155.98.34.14 ping statistics ---
+1 packets transmitted, 0 received, 100% packet loss, time 0ms
+
+[lnevers@host2 ~]$ 
+}}}
+
+
+Verified unauthenticated SSH access, as user lnevers1 tried to ssh to control interface for lnevers experiment:
+{{{
+hostx:~% ssh pc5.utah.geniracks.net -p 30267 -l lnevers
+lnevers@pc5.utah.geniracks.net's password: 
+Permission denied, please try again.
+lnevers@pc5.utah.geniracks.net's password: 
+Permission denied, please try again.
+lnevers@pc5.utah.geniracks.net's password: 
+Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
+hostx:~% 
+}}} 
+
+Verified shared writable filesystem mount for each user. As user lnevers accessed shared area:
+{{{
+[lnevers@host2 ~]$ id
+uid=20001(lnevers) gid=504(pgeni-gpolab-bbn) groups=504(pgeni-gpolab-bbn),0(root)
+[lnevers@host2 ~]$ ls -l /proj/pgeni-gpolab-bbn-com/exp/
+total 6
+drwxrwx--- 10 geniuser pgeni-gpolab-bbn 512 May 31 07:57 ecgtest
+drwxrwx--- 10 geniuser pgeni-gpolab-bbn 512 Jun  1 08:19 ig-exp2-2vm
+drwxrwx--- 10 geniuser pgeni-gpolab-bbn 512 Jun  1 08:25 lnubuntu12b
+}}}
+
+As user lnevers1 accessed shared area:
+{{{
+hostx:~% id
+uid=20001(lnevers1) gid=504(pgeni-gpolab-bbn) groups=504(pgeni-gpolab-bbn),0(root)
+hostx:~% cd /proj/pgeni-gpolab-bbn-com/exp/
+hostx:/proj/pgeni-gpolab-bbn-com/exp% ls -l
+total 6
+drwxrwx--- 10 geniuser pgeni-gpolab-bbn 512 May 31 07:57 ecgtest
+drwxrwx--- 10 geniuser pgeni-gpolab-bbn 512 Jun  1 08:19 ig-exp2-2vm
+drwxrwx--- 10 geniuser pgeni-gpolab-bbn 512 Jun  1 08:25 lnubuntu12b
+hostx:/proj/pgeni-gpolab-bbn-com/exp% 
+}}}
 
 == Step 17. Review system statistics and VM isolation and network isolation on data plane ==