Re: [ceph-users] Restoring keyring capabilities

2018-02-17 Thread Eugen Block
Hi, I'm not sure if this is applicable to the admin user, but there's a import function in the ceph-authtool which allows to import caps from a file. I used it once in a test cluster to restore keyrings for a specific user. But it wasn't the admin's caps, so I'm not sure if this will

Re: [ceph-users] Restoring keyring capabilities

2018-02-16 Thread Nico Schottelius
It seems your monitor capabilities are different to mine: root@server3:/opt/ungleich-tools# ceph -k /var/lib/ceph/mon/ceph-server3/keyring -n mon. auth list 2018-02-16 20:34:59.257529 7fe0d5c6b700 0 librados: mon. authentication error (13) Permission denied [errno 13] error connecting to the

Re: [ceph-users] Restoring keyring capabilities

2018-02-16 Thread Michel Raabe
On 02/16/18 @ 18:59, Nico Schottelius wrote: > Saw that, too, however it does not work: > > root@server3:/var/lib/ceph/mon/ceph-server3# ceph -n mon. --keyring keyring > auth caps client.admin mds 'allow *' osd 'allow *' mon 'allow *' > 2018-02-16 17:23:38.154282 7f7e257e3700 0 librados: mon.

Re: [ceph-users] Restoring keyring capabilities

2018-02-16 Thread Nico Schottelius
Saw that, too, however it does not work: root@server3:/var/lib/ceph/mon/ceph-server3# ceph -n mon. --keyring keyring auth caps client.admin mds 'allow *' osd 'allow *' mon 'allow *' 2018-02-16 17:23:38.154282 7f7e257e3700 0 librados: mon. authentication error (13) Permission denied [errno

Re: [ceph-users] Restoring keyring capabilities

2018-02-16 Thread Michel Raabe
On 02/16/18 @ 18:21, Nico Schottelius wrote: > on a test cluster I issued a few seconds ago: > > ceph auth caps client.admin mgr 'allow *' > > instead of what I really wanted to do > > ceph auth caps client.admin mgr 'allow *' mon 'allow *' osd 'allow *' \ > mds allow > > Now any access

[ceph-users] Restoring keyring capabilities

2018-02-16 Thread Nico Schottelius
Hello, on a test cluster I issued a few seconds ago: ceph auth caps client.admin mgr 'allow *' instead of what I really wanted to do ceph auth caps client.admin mgr 'allow *' mon 'allow *' osd 'allow *' \ mds allow Now any access to the cluster using client.admin correctly results in