Thanks for your reply.
Server :[root@ceph-1 ~]# rpm -qa | grep ceph
ceph-mon-0.94.1-13.el7cp.x86_64
ceph-radosgw-0.94.1-13.el7cp.x86_64
ceph-0.94.1-13.el7cp.x86_64
ceph-osd-0.94.1-13.el7cp.x86_64
ceph-deploy-1.5.25-1.el7cp.noarch
ceph-common-0.94.1-13.el7cp.x86_64
[root@ceph-1 ~]# uname -a
Linux ceph-1.qa.lab.tlv.redhat.com 3.10.0-327.el7.x86_64 #1 SMP Thu Oct 29 17:29:29 EDT 2015 x86_64 x86_64 x86_64 GNU/Linux
[root@RHEL7 ~]# rpm -qa | grep ceph
ceph-fuse-0.94.6-0.el7.x86_64
python-cephfs-0.94.6-0.el7.x86_64
libcephfs1-0.94.6-0.el7.x86_64
ceph-common-0.94.6-0.el7.x86_64
ceph-0.94.6-0.el7.x86_64
[root@RHEL7 ~]# uname -a
Linux RHEL7.1Server 3.10.0-229.26.1.el7.x86_64 #1 SMP Fri Dec 11 16:53:27 EST 2015 x86_64 x86_64 x86_64 GNU/Linux
[root@RHEL7 ~]# su - sanlock -s /bin/bash
Last login: Wed Mar 2 14:06:34 IST 2016 on pts/0
-bash-4.2$ whoami
sanlock
-bash-4.2$ touch /rhev/data-center/mnt/ceph-1.qa.lab\:6789\:_1111/test
touch: cannot touch ‘/rhev/data-center/mnt/ceph-1.qa.lab:6789:_1111/test’: Permission denied
[root@RHEL7 ~]# su - vdsm -s /bin/bash
Last login: Wed Mar 2 12:19:11 IST 2016 on pts/1
-bash-4.2$ touch /rhev/data-center/mnt/ceph-1.qa.lab\:6789\:_1111/test
-bash-4.2$ rm /rhev/data-center/mnt/ceph-1.qa.lab\:6789\:_1111/test
-bash-4.2$
Permissions of directory :
ll
total 0
drwxr-xr-x 1 vdsm kvm 0 Mar 2 14:08 1111
On Wed, Mar 2, 2016 at 6:25 PM, Gregory Farnum <gfarnum@xxxxxxxxxx> wrote:
On Wed, Mar 2, 2016 at 4:21 AM, Fred Rolland <frolland@xxxxxxxxxx> wrote:
> Hi,
>
> I am trying to use CEPH FS in oVirt (RHEV).
> The mount is created OK, however, the hypervisor need access to the mount
> from different users (eg: vdsm, sanlock)
> It seems that Sanlock user is having permissions issues.
>
> When using NFS, configuring the export as all_squash and defining
> anonuid/anongid will solve this problem [1].
>
> Is there a possibility to configure in Ceph FS an equivalent to NFS
> all_squash/anonuid/anongid ?
What version of Ceph are you running? Newer versions have added a
security model and include *some* UID squashing features, but prior to
Infernalis, CephFS didn't do any security checking at all (it was all
client-side in the standard VFS).
-Greg
_______________________________________________ ceph-users mailing list ceph-users@xxxxxxxxxxxxxx http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
