Thanks for looking Sage, I came to this conclusion myself as well and this seemed to work. I'm trying to replicate a ceph cluster that was made with ceph-deploy manually. I noted that these capabilities entries were not in the ceph-deploy cluster. Does ceph-deploy do something special when creating the client.admin key so it doesn't need capabilities? Thanks again! -- Kevin Weiler IT IMC Financial Markets | 233 S. Wacker Drive, Suite 4300 | Chicago, IL 60606 | http://imc-chicago.com/ Phone: +1 312-204-7439 | Fax: +1 312-244-3301 | E-Mail: kevin.weiler@xxxxxxxxxxxxxxx On 8/3/13 11:16 AM, "Sage Weil" <sage@xxxxxxxxxxx> wrote: >On Fri, 2 Aug 2013, Kevin Weiler wrote: >> I'm having some trouble bootstrapping my monitors using this page as a >> guide: >> >> http://ceph.com/docs/next/dev/mon-bootstrap/ >> >> I can't seem to authenticate to my monitors with client.admin after I've >> created them and started them: >> > >You also need > >> [root@camelot ~]# cat /etc/ceph/ceph.keyring >> [mon.] >> key = AQD6yftRkKY3NxAA5VNbtUM23C3uPqUUXYSHeQ== > caps mon = allow * > >> [client.admin] >> key = AQANyvtRYDHCCxAAwgcgdMJ9ue64m6+enYONOw== > caps mon = allow * > >so that the mon knows these users are allowed to do everything. > >sage > >> >> [root@camelot ~]# monmaptool --create --add camelot 10.198.1.3:6789 >>monmap >> monmaptool: monmap file monmap >> monmaptool: generated fsid 87a5f355-f7be-43aa-b26c-b6ad23f371bb >> monmaptool: writing epoch 0 to monmap (1 monitors) >> >> [root@camelot ~]# ceph-mon --mkfs -i camelot --monmap monmap --keyring >>/etc/ >> ceph/ceph.keyring >> ceph-mon: created monfs at /srv/mon.camelot for mon.camelot >> >> [root@camelot ~]# service ceph start >> === mon.camelot === >> Starting Ceph mon.camelot on camelot... >> === mds.camelot === >> Starting Ceph mds.camelot on camelot... >> starting mds.camelot at :/0 >> >> [root@camelot ~]# ceph auth get mon. >> access denied >> >> If someone could tell me what I'm doing wrong it would be greatly >> appreciated. Thanks! >> >> >> -- >> >> Kevin Weiler >> >> IT >> >> >> >> IMC Financial Markets | 233 S. Wacker Drive, Suite 4300 | Chicago, IL >>60606 >> | http://imc-chicago.com/ >> >> Phone: +1 312-204-7439 | Fax: +1 312-244-3301 | >> E-Mail: kevin.weiler@xxxxxxxxxxxxxxx >> >> >> >>_________________________________________________________________________ >>___ >> >> The information in this e-mail is intended only for the person or >>entity to >> which it is addressed. >> >> It may contain confidential and /or privileged material. If someone >>other >> than the intended recipient should receive this e-mail, he / she shall >>not >> be entitled to read, disseminate, disclose or duplicate it. >> >> If you receive this e-mail unintentionally, please inform us >>immediately by >> "reply" and then delete it from your system. Although this information >>has >> been compiled with great care, neither IMC Financial Markets & Asset >> Management nor any of its related entities shall accept any >>responsibility >> for any errors, omissions or other inaccuracies in this information or >>for >> the consequences thereof, nor shall it be bound in any way by the >>contents >> of this e-mail or its attachments. In the event of incomplete or >>incorrect >> transmission, please return the e-mail to the sender and permanently >>delete >> this message and any attachments. >> >> Messages and attachments are scanned for all known viruses. Always scan >> attachments before opening them. >> >> ________________________________ The information in this e-mail is intended only for the person or entity to which it is addressed. It may contain confidential and /or privileged material. If someone other than the intended recipient should receive this e-mail, he / she shall not be entitled to read, disseminate, disclose or duplicate it. If you receive this e-mail unintentionally, please inform us immediately by "reply" and then delete it from your system. Although this information has been compiled with great care, neither IMC Financial Markets & Asset Management nor any of its related entities shall accept any responsibility for any errors, omissions or other inaccuracies in this information or for the consequences thereof, nor shall it be bound in any way by the contents of this e-mail or its attachments. In the event of incomplete or incorrect transmission, please return the e-mail to the sender and permanently delete this message and any attachments. Messages and attachments are scanned for all known viruses. Always scan attachments before opening them. _______________________________________________ ceph-users mailing list ceph-users@xxxxxxxxxxxxxx http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
 |