[ceph-users] Re: ceph namespace access control

2022-03-25 Thread Eugen Block
Hi, This is because the default client id is "admin" -- you are trying to connect to the cluster as admin with user3's key here. that makes sense, of course. This is a bit broader than perhaps needed. If the intention is to allow user3 to create and use RBD images in namespace user3 of

[ceph-users] Re: ceph namespace access control

2022-03-25 Thread Kai Stian Olstad
On Wed, Mar 23, 2022 at 07:14:22AM +0200, Budai Laszlo wrote: > Hello all, > > what capabilities a ceph user should have in order to be able to create rbd > images in one namespace only? > > I have tried the following: > > [root@ceph1 ~]# rbd namespace ls --format=json >

[ceph-users] Re: ceph namespace access control

2022-03-25 Thread Ilya Dryomov
On Fri, Mar 25, 2022 at 10:11 AM Eugen Block wrote: > > Hi, > > I was curious and tried the same with debug logs. One thing I noticed > was that if I use the '-k ' option I get a different error > message than with '--id user3'. So with '-k' the result is the same: > > ---snip--- > pacific:~ #

[ceph-users] Re: ceph namespace access control

2022-03-25 Thread Eugen Block
Hi, I was curious and tried the same with debug logs. One thing I noticed was that if I use the '-k ' option I get a different error message than with '--id user3'. So with '-k' the result is the same: ---snip--- pacific:~ # rbd -k /etc/ceph/ceph.client.user3.keyring -p test2 --namespace