On Wed, Jan 31, 2018 at 1:08 PM, Marc Roos <M.Roos@xxxxxxxxxxxxxxxxx> wrote: > > > ceph auth caps osd.10 mgr 'allow profile osd' mon 'allow profile osd' > osd 'allow *' > Generates this: > osd.10 > key: xxxxxxxxx== > caps: [mgr] allow profile osd > caps: [mon] allow profile osd > caps: [osd] allow * > > ceph auth caps osd.10 mgr 'profile osd' mon 'profile osd' osd 'allow *' > Generates this: > osd.10 > key: xxxxxxxxx== > caps: [mgr] profile osd > caps: [mon] profile osd > caps: [osd] allow * > > I take it the allow is not mandatory, but I think the 'ceph auth list' > should produce only one output. > > I guess I can put every profile listing without the allow? Because that > is going to be the standard? > https://github.com/ceph/ceph/commit/fc816cbec5ca4068e121fcea2bd6b51c83a84bee Hmm, I didn't notice that change at the time, but it doesn't seem to cover MDS auth caps, so the "allow" part is probably still needed there. John > > > > -----Original Message----- > From: Marc Roos > Sent: woensdag 31 januari 2018 13:54 > Cc: ceph-users > Subject: ceph auth list > > > I have some osd's with this auth? I guess this osw is incorrect not, > should be osd? > > osd.12 > key: xxxxxx== > caps: [mgr] allow profile osd > caps: [mon] allow profile osd > caps: [osw] allow * > _______________________________________________ > ceph-users mailing list > ceph-users@xxxxxxxxxxxxxx > http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com > > > _______________________________________________ > ceph-users mailing list > ceph-users@xxxxxxxxxxxxxx > http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com _______________________________________________ ceph-users mailing list ceph-users@xxxxxxxxxxxxxx http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
 |