Re: Mount CephFS with dedicated user fails: mount error 13 = Permission denied

Jaime Ibar <jaime@xxxxxxxxxxxx> · Mon, 24 Jul 2017 10:51:47 +0100

    Hi, 

    I think you there is missing perm for the mds.
    Try adding allow r to mds permissions.
    Something like

    ceph auth get-or-create client.mtyadm mon 'allow r' mds 'allow
        r, allow rw path=/MTY' osd 'allow rw pool=hdb-backup,allow
      rw pool=hdb-backup_metadata' -o
      /etc/ceph/ceph.client.mtyadm.keyring

    Jaime

    On 24/07/17 10:36, c.monty@xxxxxx
      wrote:

      Hello!

I want to mount CephFS with a dedicated user in order to avoid putting the admin key on every client host.
Therefore I created a user account
ceph auth get-or-create client.mtyadm mon 'allow r' mds 'allow rw path=/MTY' osd 'allow rw pool=hdb-backup,allow rw pool=hdb-backup_metadata' -o /etc/ceph/ceph.client.mtyadm.keyring
and wrote out the keyring
ceph-authtool -p -n client.mtyadm ceph.client.mtyadm.keyring > ceph.client.mtyadm.key

This user is now displayed in auth list:
client.mtyadm
        key: AQBYu3VZLg66LBAAGM1jW+cvNE6BoJWfsORZKA==
        caps: [mds] allow rw path=/MTY
        caps: [mon] allow r
        caps: [osd] allow rw pool=hdb-backup,allow rw pool=hdb-backup_metadata

When I try to mount directory /MTY on the client host I get this error:
ld2398:/etc/ceph # mount -t ceph ldcephmon1,ldcephmon2,ldcephmon2:/MTY /mnt/cephfs -o name=mtyadm,secretfile=/etc/ceph/ceph.client.mtyadm.key
mount error 13 = Permission denied

The mount works using admin though:
ld2398:/etc/ceph # mount -t ceph ldcephmon1,ldcephmon2,ldcephmon2:/MTY /mnt/cephfs -o name=admin,secretfile=/etc/ceph/ceph.client.admin.key
ld2398:/etc/ceph # mount | grep cephfs
10.96.5.37,10.96.5.38,10.96.5.38:/MTY on /mnt/cephfs type ceph (rw,relatime,name=admin,secret=<hidden>,acl)

What is causing this mount error?

THX
_______________________________________________
ceph-users mailing list
ceph-users@xxxxxxxxxxxxxx
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com

    -- 

Jaime Ibar
High Performance & Research Computing, IS Services
Lloyd Building, Trinity College Dublin, Dublin 2, Ireland.
http://www.tchpc.tcd.ie/ | jaime@xxxxxxxxxxxx
Tel: +353-1-896-3725

_______________________________________________
ceph-users mailing list
ceph-users@xxxxxxxxxxxxxx
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com