I can comment on that docker image: We built that to bake in a certain amount of config regarding nfs-ganesha serving CephFS and using LDAP to do idmap lookups (example ldap entries are in readme). At least as we use it the server-side uid/gid information is pulled from sssd using a config file on the machine hosting the docker image but one could probably also map passwd files to the image. Most of it is configurable with environment vars if some other usage were desired, or it could be a good start to build something specific to your needs. The README is a bit out of date as the image now uses mimic and ganesha 2.6. We use it successfully to serve CephFS to a few krb5 authenticated clients / users and have them be mapped to uid/gid/gidlist out of our LDAP directory instead of their local info. I'm happy to answer questions on the list or via direct email if that's more appropriate.
thanks, Ben On Thu, Jul 26, 2018 at 4:32 AM, John Hearns <hear...@googlemail.com> wrote: > NFS Ganesha certainly works with Cephfs. I would investigate that also. > http://docs.ceph.com/docs/master/cephfs/nfs/ > > Regarding Active Directory, I have done a lot of work recently with sssd. > Not entirely relevant to this list, please send me a mail offline. > > Not sure if this is any direct use > https://github.com/MI-OSiRIS/docker-nfs-ganesha-ceph > > > > > > > > > > On Thu, 26 Jul 2018 at 08:34, Serkan Çoban <cobanser...@gmail.com> wrote: >> >> You can do it by exporting cephfs by samba. I don't think any other >> way exists for cephfs. >> >> On Thu, Jul 26, 2018 at 9:12 AM, Manuel Sopena Ballesteros >> <manuel...@garvan.org.au> wrote: >> > Dear Ceph community, >> > >> > >> > >> > I am quite new to Ceph but trying to learn as much quick as I can. We >> > are >> > deploying our first Ceph production cluster in the next few weeks, we >> > choose >> > luminous and our goal is to have cephfs. One of the question I have been >> > asked by other members of our team is if there is a possibility to >> > integrate >> > ceph authentication/authorization with Active Directory. I have seen in >> > the >> > documentations that objct gateway can do this but I am not about cephfs. >> > >> > >> > >> > Anyone has any idea if I can integrate cephfs with AD? >> > >> > >> > >> > Thank you very much >> > >> > >> > >> > Manuel Sopena Ballesteros | Big data Engineer >> > Garvan Institute of Medical Research >> > The Kinghorn Cancer Centre, 370 Victoria Street, Darlinghurst, NSW 2010 >> > T: + 61 (0)2 9355 5760 | F: +61 (0)2 9295 8507 | E: >> > manuel...@garvan.org.au >> > >> > >> > >> > NOTICE >> > Please consider the environment before printing this email. This message >> > and >> > any attachments are intended for the addressee named and may contain >> > legally >> > privileged/confidential/copyright information. If you are not the >> > intended >> > recipient, you should not read, use, disclose, copy or distribute this >> > communication. If you have received this message in error please notify >> > us >> > at once by return email and then delete both messages. We accept no >> > liability for the distribution of viruses or similar in electronic >> > communications. This notice should not be removed. >> > >> > _______________________________________________ >> > ceph-users mailing list >> > ceph-users@lists.ceph.com >> > http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com >> > >> _______________________________________________ >> ceph-users mailing list >> ceph-users@lists.ceph.com >> http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com > > > _______________________________________________ > ceph-users mailing list > ceph-users@lists.ceph.com > http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com > _______________________________________________ ceph-users mailing list ceph-users@lists.ceph.com http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
