On Fri, 30 Jul 2010, Sage Weil wrote: > The cauthtool man page has a minimal set of caps for a machine to mount > the file system. Basically, > > client.foo > key: asdf > caps: [mds] allow > caps: [mon] allow r > caps: [osd] allow rw; allow rw pool=0 Correction: this should actually be caps: [osd] allow rw pool=data (The above works too, but only because the 'allow rw' grants it access to all object pools.) sage > > Or, if you're lazy, you can just use the client.admin key. Just be sure > to specify both name=admin,secret=asdf (or name=foo,secret=asdf, if using > the above) as a mount option. (The 'client.' name prefix is assumed.) > > I hope that answers your questions? > sage > > > > I pasted a redacted version of our > > "auth list" output below. Perhaps we have an error in our authorization > > list that caused the errors we experienced after the upgrade (and before > > I changed some things). I can send a ceph.conf file as well if you need > > it. > > > > We can provide feedback on cephx code if you need it, as we were > > planning on keeping our cluster "cephx enabled". > > > > Thanks, > > > > Nathan Regola > > Grid and Cloud Computing Analyst > > University of Notre Dame > > Center for Research Computing > > P.O. Box 539 > > Room 110 Information Technology Center > > Notre Dame, IN 46556 > > > > Phone: 574-631-5287 > > > > > > 10.07.30_13:07:08.584179 mon <- [auth,list] > > 10.07.30_13:07:08.584825 mon0 -> 'installed auth entries: > > mon.0 > > key: T > > caps: [mon] allow * > > mds.opteron03 > > key: U > > caps: [mds] allow > > caps: [mon] allow rwx > > caps: [osd] allow * > > osd.0 > > key: V > > caps: [mon] allow rwx > > caps: [osd] allow * > > osd.1 > > key: W > > caps: [mon] allow rwx > > caps: [osd] allow * > > client.admin > > key: X > > caps: [mds] allow > > caps: [mon] allow * > > caps: [osd] allow * > > ' (0) > > > > -- > > To unsubscribe from this list: send the line "unsubscribe ceph-devel" in > > the body of a message to majordomo@xxxxxxxxxxxxxxx > > More majordomo info at http://vger.kernel.org/majordomo-info.html > > > >
