Interesting !
Is it safe to do this ?
Perhaps "rados" is considered an internal command while rbd is a
client librados ?
In MonClient.cc :
if (!cct->_conf->auth_supported.empty())
method = cct->_conf->auth_supported;
else if (entity_name.get_type() == CEPH_ENTITY_TYPE_OSD ||
entity_name.get_type() == CEPH_ENTITY_TYPE_MDS ||
entity_name.get_type() == CEPH_ENTITY_TYPE_MON)
method = cct->_conf->auth_cluster_required;
else
method = cct->_conf->auth_client_required;
2016-03-15 9:35 GMT+01:00 Nguyen Hoang Nam <nghnam@xxxxxxxxxxx>:
> Hi there,
>
> I setup ceph cluster with disable cephx cluster authen and enable cephx
> client authen as follow :
>
> auth_cluster_required = none
>
> auth_service_required = cephx
>
> auth_client_required = cephx
>
> I can run command such as `ceph -s`, `rados -p rbd put` but I can not run
> command `rbd ls`, `rbd create` ... Output of those commands always are:
>
> 2016-03-15 10:49:30.659194 7f1a6eda0700 0 cephx: verify_reply couldn't
> decrypt with error: error decoding block for decryption
>
> 2016-03-15 10:49:30.659211 7f1a6eda0700 0 -- 172.30.6.101:0/954989888 >>
> 172.30.6.103:6804/23638 pipe(0x7f1a8119f7f0 sd=4 :45067 s=1 pgs=0 cs=0 l=1
> c=0x7f1a8
> 1197000).failed verifying authorize reply
>
> Can you explain me why RBD failed in this case ? Thank you in advance
>
>
> _______________________________________________
> ceph-users mailing list
> ceph-users@xxxxxxxxxxxxxx
> http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
>
--
________________________________________________________
________________________________________________________
_______________________________________________
ceph-users mailing list
ceph-users@xxxxxxxxxxxxxx
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
