Re: Auth capability required to run ceph daemon commands

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, Apr 14, 2016 at 11:17 AM, Sergio A. de Carvalho Jr.
<scarvalhojr@xxxxxxxxx> wrote:
> Hi,
>
> Does anybody know what auth capabilities are required to run commands such
> as:

When you're doing "ceph daemon", no ceph authentication is happening:
this is a local connection to a UNIX socket in /var/run/ceph.  So this
just depends on the user you're running as having the right file
permissions on the socket file.

Cheers,
John

> ceph daemon osd.0 perf dump
>
> Even with the client.admin user, I can't get it to work:
>
> $ ceph daemon osd.0 perf dump --name client.admin
> --keyring=/etc/ceph/ceph.client.admin.keyring
> {}
>
> $ ceph auth get client.admin
> exported keyring for client.admin
> [client.admin]
> key = **********
> caps mds = "allow"
> caps mon = "allow *"
> caps osd = "allow *"
>
> The only way I can run that command is with sudo:
>
> $ sudo ceph daemon osd.0 perf dump
> {
>     "WBThrottle": {
> ...
> }
>
> I'm using Ceph 0.9.4 on CentOS 6.5.
>
> Thanks,
>
> Sergio
>
> _______________________________________________
> ceph-users mailing list
> ceph-users@xxxxxxxxxxxxxx
> http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
>
_______________________________________________
ceph-users mailing list
ceph-users@xxxxxxxxxxxxxx
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com



[Index of Archives]     [Information on CEPH]     [Linux Filesystem Development]     [Ceph Development]     [Ceph Large]     [Linux USB Development]     [Video for Linux]     [Linux Audio Users]     [Yosemite News]     [Linux Kernel]     [Linux SCSI]     [xfs]


  Powered by Linux