There's only one mon keyring that's shared by all mons, the mon user
therefore doesn't contain the mon name.

Try "-n mon."


Paul

-- 
Paul Emmerich

Looking for help with your Ceph cluster? Contact us at https://croit.io

croit GmbH
Freseniusstr. 31h
81247 München
www.croit.io
Tel: +49 89 1896585 90

On Mon, Mar 9, 2020 at 10:35 AM <witt...@appvisory.com> wrote:
>
> Hello Guys,
>
> Unfortunately, I''ve deleted some caps from client.admin and tried the 
> following solution so set them back:
> http://lists.ceph.com/pipermail/ceph-users-ceph.com/2017-January/015474.html
>
> I’ve tried the following:
>
> # ssh’d to a mon node and changed dir to the mon directory
> cd /var/lib/ceph/mon/<monname>
>
> # tried to authenticate with the monitor keyring and set the client.admin 
> caps to give back full permissions
> ceph -n mon.<monid> --keyring keyring  auth caps client.admin mds 'allow *' 
> osd 'allow *' mon 'allow *'
>
> When i try to modify the client.admin caps, the command just hangs at the 
> shell until i press ctrl-c, which gets aknowledged with "Cluster connection 
> aborted”
> Also i can’t see the the connection in the ceph.audit.log
>
> Do i make a mistake here or is this "workaround" not supported anymore in 
> nautilus (14.2.6)?
>
> Regards
> _______________________________________________
> ceph-users mailing list -- ceph-users@ceph.io
> To unsubscribe send an email to ceph-users-le...@ceph.io
_______________________________________________
ceph-users mailing list -- ceph-users@ceph.io
To unsubscribe send an email to ceph-users-le...@ceph.io

Reply via email to