<html><body><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000"><div>Hin<br></div><div>no, we don't use object services. Maybe the object services condition should be mentioned in the bulletin.<br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div>Thanks,<br data-mce-bogus="1"></div><div> Juergen<br data-mce-bogus="1"></div><div><br></div><hr id="zwchr" data-marker="__DIVIDER__"><div data-marker="__HEADERS__"><blockquote style="border-left:2px solid #1010FF;margin-left:5px;padding-left:5px;color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;"><b>From: </b>"John T Olson" <jtolson@us.ibm.com><br><b>To: </b>"gpfsug main discussion list" <gpfsug-discuss@spectrumscale.org><br><b>Sent: </b>Wednesday, 26 August, 2020 17:52:56<br><b>Subject: </b>Re: [gpfsug-discuss] Question about Security Bulletin: Openstack Keystone vulnerabilities affects IBM Spectrum Scale (CVE-2020-12689)<br></blockquote></div><div data-marker="__QUOTED_TEXT__"><blockquote style="border-left:2px solid #1010FF;margin-left:5px;padding-left:5px;color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;"><p><font size="2">Hi, openstack Keystone is only used if you have configured and are using the object services. If you are not using object services, then the local Keystone server will not be configured and this vulnerability should not affect you. Do you have object services enabled?</font><br><font size="2"><br><br>Thanks,<br><br>John<br><br>John T. Olson, Ph.D.<br>Spectrum Scale Security<br>Master Inventor<br>957/9032-1 Tucson, AZ, 85744<br>(520) 799-5185, tie 321-5185 (FAX: 520-799-4237)<br>Email: jtolson@us.ibm.com<br>LinkedIn: www.linkedin.com/in/john-t-olson<br>Follow me on twitter: @John_T_Olson</font><br><br><img src="cid:1__=8FBB0F43DFC4AEF88f9e8a93df938690918c8FB@" alt="Inactive hide details for "Hannappel, Juergen" ---08/26/2020 07:25:12 AM---Hello, in the bulletin https://www.ibm.com/support/p" width="16" height="16" border="0"><font size="2" color="#424282">"Hannappel, Juergen" ---08/26/2020 07:25:12 AM---Hello, in the bulletin <a href="https://www.ibm.com/support/pages/node/6323241" target="_blank" rel="nofollow noopener noreferrer">https://www.ibm.com/support/pages/node/6323241</a> it's mentioned</font><br><br><font size="2" color="#5F5F5F">From: </font><font size="2">"Hannappel, Juergen" <juergen.hannappel@desy.de></font><br><font size="2" color="#5F5F5F">To: </font><font size="2">gpfsug main discussion list <gpfsug-discuss@spectrumscale.org></font><br><font size="2" color="#5F5F5F">Date: </font><font size="2">08/26/2020 07:25 AM</font><br><font size="2" color="#5F5F5F">Subject: </font><font size="2">[EXTERNAL] [gpfsug-discuss] Question about Security Bulletin: Openstack Keystone vulnerabilities affects IBM Spectrum Scale (CVE-2020-12689)</font><br><font size="2" color="#5F5F5F">Sent by: </font><font size="2">gpfsug-discuss-bounces@spectrumscale.org</font><br></p><hr style="color:#8091a5" width="100%" size="2" noshade="noshade" align="left"><br><br><br><tt><font size="2">Hello,<br>in the bulletin </font></tt><tt><font size="2"><a href="https://www.ibm.com/support/pages/node/6323241" target="_blank" rel="nofollow noopener noreferrer">https://www.ibm.com/support/pages/node/6323241</a></font></tt><tt><font size="2"> it's mentioned<br>"IBM Spectrum Scale, shipped with Openstack keystone, is exposed to vulnerabilities as detailed below."<br>I am not aware of any openstack components in our standard Scale deployments,<br>so how am I to read this sentence? Is there some Openstack stuff bundled into a standard gpfs installation?<br><br>-- <br>Dr. Jürgen Hannappel DESY/IT Tel. : +49 40 8998-4616<br>_______________________________________________<br>gpfsug-discuss mailing list<br>gpfsug-discuss at spectrumscale.org<br></font></tt><tt><font size="2"><a href="http://gpfsug.org/mailman/listinfo/gpfsug-discuss" target="_blank" rel="nofollow noopener noreferrer">http://gpfsug.org/mailman/listinfo/gpfsug-discuss</a></font></tt><tt><font size="2"> <br><br></font></tt><br><br><br>
<br>_______________________________________________<br>gpfsug-discuss mailing list<br>gpfsug-discuss at spectrumscale.org<br>http://gpfsug.org/mailman/listinfo/gpfsug-discuss<br></blockquote></div></div></body></html>