Re: cephx auth issue

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



* Travis Rhoden <trhoden@xxxxxxxxx> [20121109 09:55]:
> I'm not sure what I've done wrong here:
> 
> Things are okay as client.admin:
> 
> # rbd -p images --id admin ls
> test
> 
> But not as client.images:
> 
> # rbd -p images --id images ls
> error: (1) Operation not permitted
> 
> The privs/caps seem okay in ceph auth:
> 
> # ceph auth list
> <snip>
> client.admin
> 	key: <snip>
> 	caps: [mds] allow
> 	caps: [mon] allow *
> 	caps: [osd] allow *
> client.images
> 	key: <snip>
> 	caps: [mon] allow r
> 	caps: [osd] allow rwx pool=images
> client.volumes
> 	key: <snip>
> 	caps: [mon] allow r
> 	caps: [osd] allow rwx pool=volumes, allow rx pool=images
> 

I had a very similar problem after I upgraded my test cluster from
argonaut to 0.53.  For me it was a "caps" parsing issue involving the
'=' character (which has been fixed in 0.54.  A nice person on IRC
helped me out.  Updating the caps from something like this:

> 	caps: [osd] allow rwx pool=volumes, allow rx pool=images

To this:

  	caps: [osd] allow rwx pool volumes, allow rx pool images

...fixed the issue for me.

Apparently in 0.54 parsing of '=' in a caps line will work properly
again.

Ben

-- 
________________________________________________________________________
pub   4096R/318B6A97 2009-05-11 Ben Poliakoff <benp@xxxxxxxx>
 Primary key fingerprint: 3F23 EBC8 B73E 92B7 0A67  705A 8219 DCF0 318B 6A97

Attachment: signature.asc
Description: Digital signature


[Index of Archives]     [CEPH Users]     [Ceph Large]     [Information on CEPH]     [Linux BTRFS]     [Linux USB Devel]     [Video for Linux]     [Linux Audio Users]     [Yosemite News]     [Linux Kernel]     [Linux SCSI]
  Powered by Linux