Open Baton provides several mechanisms for managing users, roles and projects. When accessing the dashboard, you will be prompted for a username and password. The first access can only be done with the super user created during the installation. Then it is possible to create other users and projects. The super user(admin) password is set while installing the platform.
Open Baton's security model consists of different users, roles and projects.
A project can be used to isolate a group of users and make resources like particular VIMs, NSDs etc. only available to this group. Users can be assigned to projects and adopt a different role per project. Changes made in a project's environment are not visible from another project. When the NFVO starts a default project is created. Every project has a unique name and a project-id.
A user can have the role USER or GUEST in a project. Administrators with the role ADMIN have control over the whole system. Admin users can add and delete users and projects, assign roles and have access to all the projects. When starting the NFVO there will be already one super user (with the role of an ADMIN) defined by default with the user name admin and the password chosen during installation (openbaton by default)
The password can be changed in the top right corner of the dashboard, by clicking on the username drop down menu.
A user with the role USER in some specific projects, can create, delete and update PoPs, NSD, VNFD, VNFPackages, NSR and VNFR only inside his projects. He cannot access or modify other projects or users.
A user with the role GUEST can just see the components (PoPs, NSD, NSR etc.) of the project he is assigned to but he cannot create, update or delete them. Furthermore he does not see other projects and users.
The NFVO can use SSL to encrypt communication on the northbound REST APIs. To enable this feature set
server.ssl.enabled = true
server.port: 8443
server.ssl.key-store = /etc/openbaton/keystore.p12
server.ssl.key-store-password = password
server.ssl.keyStoreType = PKCS12
server.ssl.keyAlias = tomcatin the openbaton.properties file.
Start the NFVO and it will use SSL from now on and run on port 8443 instead of 8080. To access the dashboard the use of https is required. It is also possible to specify different key store files or even third part authorities. For a more documentation on this feature please refer to the Spring Doc and Tutorials
<script type="text/javascript" charset="utf-8"> // Creating custom :external selector $.expr[':'].external = function(obj){ return !obj.href.match(/^mailto\:/) && (obj.hostname != location.hostname); }; $(function(){ $('a:external').addClass('external'); $(".external").attr('target','_blank'); }) </script>