Re: After upgrade to 15.2.11 no access to cluster any more

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Robert,

That's not very good !

You can probably set that back to false on each mon with:

ceph daemon mon.`hostname -s` config set
auth_allow_insecure_global_id_reclaim true

-- Dan


On Thu, Apr 22, 2021 at 9:08 AM Robert Sander
<r.sander@xxxxxxxxxxxxxxxxxxx> wrote:
>
> Hi,
>
> I upgraded a test cluster to 15.2.11 and after the upgrade has been
> finished the cluster status was in HEALTH_WARN because of:
>
> AUTH_INSECURE_GLOBAL_ID_RECLAIM_ALLOWED: mons are allowing insecure
> global_id reclaim
>
> According to the documentation at
> https://docs.ceph.com/en/octopus/rados/operations/health-checks/#auth-insecure-global-id-reclaim-allowed
> I ran
>
> ceph config set mon auth_allow_insecure_global_id_reclaim false
>
> because no client was reporting using insecure global_ids.
>
> Now "ceph -s" cannot connect to the cluster any more:
>
> # ceph -s
> [errno 13] RADOS permission denied (error connecting to the cluster)
>
> What should I do?
>
> Regards
> --
> Robert Sander
> Heinlein Consulting GmbH
> Schwedter Str. 8/9b, 10119 Berlin
>
> http://www.heinlein-support.de
>
> Tel: 030 / 405051-43
> Fax: 030 / 405051-19
>
> Zwangsangaben lt. §35a GmbHG:
> HRB 93818 B / Amtsgericht Berlin-Charlottenburg,
> Geschäftsführer: Peer Heinlein -- Sitz: Berlin
>
> _______________________________________________
> ceph-users mailing list -- ceph-users@xxxxxxx
> To unsubscribe send an email to ceph-users-leave@xxxxxxx
_______________________________________________
ceph-users mailing list -- ceph-users@xxxxxxx
To unsubscribe send an email to ceph-users-leave@xxxxxxx




[Index of Archives]     [Information on CEPH]     [Linux Filesystem Development]     [Ceph Development]     [Ceph Large]     [Ceph Dev]     [Linux USB Development]     [Video for Linux]     [Linux Audio Users]     [Yosemite News]     [Linux Kernel]     [Linux SCSI]     [xfs]


  Powered by Linux