Hello,

on a test cluster I issued a few seconds ago:

  ceph auth caps client.admin mgr 'allow *'

instead of what I really wanted to do

  ceph auth caps client.admin mgr 'allow *' mon 'allow *' osd 'allow *' \
  mds allow

Now any access to the cluster using client.admin correctly results in
client.admin authentication error (13) Permission denied.

Is there any way to modify the keyring capabilities "from behind",
i.e. by modifying the rocksdb of the monitors or similar?

If the answer is no, it's not a big problem, as we can easily destroy
the cluster, but if the answer is yes, it would be interesting to know
how to get out of this.

Best,

Nico

--
Modern, affordable, Swiss Virtual Machines. Visit www.datacenterlight.ch
_______________________________________________
ceph-users mailing list
ceph-users@lists.ceph.com
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com

Reply via email to