My current situation as I upgrade to v9.1.0 is that client.admin keyring seems to work fine, for instance for ceph status command. But commands that use client.bootstrap-osd such as /usr/bin/ceph --cluster ceph --name client.bootstrap-osd --keyring /var/lib/ceph/bootstrap-osd/ceph.keyring osd create --concise a428120d-99ec-4a73-999f-75d8a6bfcb2e are getting "EACCES: access denied" with log entries in ceph.audit.log such as 2015-10-22 13:50:24.070249 mon.0 10.0.2.132:6789/0 33 : audit [INF] from='client.? 10.0.2.132:0/263577121' entity='client.bootstrap-osd' cmd=[{"prefix": "osd create", "uuid": "a428120d-99ec-4a73-999f-75d8a6bfcb2e"}]: access denied I tried setting debug auth = 0 in ceph.conf but couldn't tell anything from that output. Is there anything special I should look for here? Note: I do have /var/lib/ceph and subdirectories owned by ceph:ceph -- Tom -- To unsubscribe from this list: send the line "unsubscribe ceph-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html