<html><body><p><font size="2">Hi, openstack Keystone is only used if you have configured and are using the object services. If you are not using object services, then the local Keystone server will not be configured and this vulnerability should not affect you. Do you have object services enabled?</font><br><font size="2"><br><br>Thanks,<br><br>John<br><br>John T. Olson, Ph.D.<br>Spectrum Scale Security<br>Master Inventor<br>957/9032-1 Tucson, AZ, 85744<br>(520) 799-5185, tie 321-5185 (FAX: 520-799-4237)<br>Email: jtolson@us.ibm.com<br>LinkedIn: www.linkedin.com/in/john-t-olson<br>Follow me on twitter: @John_T_Olson</font><br><br><img width="16" height="16" src="cid:1__=8FBB0F43DFC4AEF88f9e8a93df938690918c8FB@" border="0" alt="Inactive hide details for "Hannappel, Juergen" ---08/26/2020 07:25:12 AM---Hello, in the bulletin https://www.ibm.com/support/p"><font size="2" color="#424282">"Hannappel, Juergen" ---08/26/2020 07:25:12 AM---Hello, in the bulletin <a href="https://www.ibm.com/support/pages/node/6323241">https://www.ibm.com/support/pages/node/6323241</a> it's mentioned</font><br><br><font size="2" color="#5F5F5F">From: </font><font size="2">"Hannappel, Juergen" <juergen.hannappel@desy.de></font><br><font size="2" color="#5F5F5F">To: </font><font size="2">gpfsug main discussion list <gpfsug-discuss@spectrumscale.org></font><br><font size="2" color="#5F5F5F">Date: </font><font size="2">08/26/2020 07:25 AM</font><br><font size="2" color="#5F5F5F">Subject: </font><font size="2">[EXTERNAL] [gpfsug-discuss] Question about Security Bulletin: Openstack Keystone vulnerabilities affects IBM Spectrum Scale (CVE-2020-12689)</font><br><font size="2" color="#5F5F5F">Sent by: </font><font size="2">gpfsug-discuss-bounces@spectrumscale.org</font><br><hr width="100%" size="2" align="left" noshade style="color:#8091A5; "><br><br><br><tt><font size="2">Hello,<br>in the bulletin </font></tt><tt><font size="2"><a href="https://www.ibm.com/support/pages/node/6323241">https://www.ibm.com/support/pages/node/6323241</a></font></tt><tt><font size="2"> it's mentioned<br>"IBM Spectrum Scale, shipped with Openstack keystone, is exposed to vulnerabilities as detailed below."<br>I am not aware of any openstack components in our standard Scale deployments,<br>so how am I to read this sentence? Is there some Openstack stuff bundled into a standard gpfs installation?<br><br>-- <br>Dr. Jürgen Hannappel DESY/IT Tel. : +49 40 8998-4616<br>_______________________________________________<br>gpfsug-discuss mailing list<br>gpfsug-discuss at spectrumscale.org<br></font></tt><tt><font size="2"><a href="http://gpfsug.org/mailman/listinfo/gpfsug-discuss">http://gpfsug.org/mailman/listinfo/gpfsug-discuss</a></font></tt><tt><font size="2"> <br><br></font></tt><br><br><BR>
</body></html>