Re: [ceph-users] Osd auth del

[John Hearns]

Thankyou.   ceph auth add did work

I did try ceph auth get-or-create this does not read from an input file
- it will generate a new key.

On Tue, 3 Dec 2019 at 13:50, Willem Jan Withagen  wrote:

> On 3-12-2019 11:43, Wido den Hollander wrote:
> >
> >
> > On 12/3/19 11:40 AM, John Hearns wrote:
> >> I had a fat fingered moment yesterday
> >> I typed   ceph auth del osd.3
> >> Where osd.3 is an otherwise healthy little osd
> >> I have not set noout or down on  osd.3 yet
> >>
> >> This is a Nautilus cluster.
> >> ceph health reports everything is OK
> >>
> >
> > Fetch the key from the OSD's datastore on the machine itself. On the OSD
> > machine you'll find a file called keyring.
> >
> > Get that file and import it with the proper caps back into cephx. Then
> > all should be fixed!
>
> The magic incantation there would be:
>
> ceph auth add osd. osd 'allow *' mon 'allow rwx' keyring
>
> --WjW
>
>

-- 










*Kheiron Medical Technologies*

kheironmed.com 
 | supporting radiologists with deep learning


Kheiron Medical Technologies Ltd. is a registered company in England and 
Wales. This e-mail and its attachment(s) are intended for the above named 
only and are confidential. If they have come to you in error then you must 
take no action based upon them but contact us immediately. Any disclosure, 
copying, distribution or any action taken or omitted to be taken in 
reliance on it is prohibited and may be unlawful. Although this e-mail and 
its attachments are believed to be free of any virus, it is the 
responsibility of the recipient to ensure that they are virus free. If you 
contact us by e-mail then we will store your name and address to facilitate 
communications. Any statements contained herein are those of the individual 
and not the organisation.




Registered number: 10184103. Registered 
office: 2nd Floor Stylus Building, 116 Old Street, London, England, EC1V 9BG
___
ceph-users mailing list
ceph-users@lists.ceph.com
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com

Re: [ceph-users] Osd auth del

[Willem Jan Withagen]

On 3-12-2019 11:43, Wido den Hollander wrote:



On 12/3/19 11:40 AM, John Hearns wrote:

I had a fat fingered moment yesterday
I typed                       ceph auth del osd.3
Where osd.3 is an otherwise healthy little osd
I have not set noout or down on  osd.3 yet

This is a Nautilus cluster.
ceph health reports everything is OK



Fetch the key from the OSD's datastore on the machine itself. On the OSD 
machine you'll find a file called keyring.


Get that file and import it with the proper caps back into cephx. Then 
all should be fixed!


The magic incantation there would be:

ceph auth add osd. osd 'allow *' mon 'allow rwx' keyring

--WjW

___
ceph-users mailing list
ceph-users@lists.ceph.com
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com

Re: [ceph-users] Osd auth del

[Wido den Hollander]

On 12/3/19 11:40 AM, John Hearns wrote:

I had a fat fingered moment yesterday
I typed                       ceph auth del osd.3
Where osd.3 is an otherwise healthy little osd
I have not set noout or down on  osd.3 yet

This is a Nautilus cluster.
ceph health reports everything is OK



Fetch the key from the OSD's datastore on the machine itself. On the OSD 
machine you'll find a file called keyring.


Get that file and import it with the proper caps back into cephx. Then 
all should be fixed!


Wido


However ceph tell osd.* version hangs when it gets to osd.3
Also the log ceph-osd.3.log is full of these lines:

2019-12-03 10:33:29.503 7f010adf1700  0 cephx: verify_authorizer could 
not get service secret for service osd secret_id=10281

2019-12-03 10:33:29.591 7f010adf1700  0 auth: could not find secret_id=10281
2019-12-03 10:33:29.591 7f010adf1700  0 cephx: verify_authorizer could 
not get service secret for service osd secret_id=10281

2019-12-03 10:33:29.819 7f010adf1700  0 auth: could not find secret_id=10281

OK, once you have all stopped laughing some advice would be appreciated.


*Kheiron Medical Technologies*

kheironmed.com | supporting radiologists with 
deep learning



Kheiron Medical Technologies Ltd. is a registered company in England and 
Wales. This e-mail and its attachment(s) are intended for the above 
named only and are confidential. If they have come to you in error then 
you must take no action based upon them but contact us immediately. Any 
disclosure, copying, distribution or any action taken or omitted to be 
taken in reliance on it is prohibited and may be unlawful. Although this 
e-mail and its attachments are believed to be free of any virus, it is 
the responsibility of the recipient to ensure that they are virus free. 
If you contact us by e-mail then we will store your name and address to 
facilitate communications. Any statements contained herein are those of 
the individual and not the organisation.


Registered number: 10184103. Registered office: 2nd Floor Stylus 
Building, 116 Old Street, London, England, EC1V 9BG



___
ceph-users mailing list
ceph-users@lists.ceph.com
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com


___
ceph-users mailing list
ceph-users@lists.ceph.com
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com

[ceph-users] Osd auth del

[John Hearns]

I had a fat fingered moment yesterday
I typed   ceph auth del osd.3
Where osd.3 is an otherwise healthy little osd
I have not set noout or down on  osd.3 yet

This is a Nautilus cluster.
ceph health reports everything is OK

However ceph tell osd.* version hangs when it gets to osd.3
Also the log ceph-osd.3.log is full of these lines:

2019-12-03 10:33:29.503 7f010adf1700  0 cephx: verify_authorizer could not
get service secret for service osd secret_id=10281
2019-12-03 10:33:29.591 7f010adf1700  0 auth: could not find secret_id=10281
2019-12-03 10:33:29.591 7f010adf1700  0 cephx: verify_authorizer could not
get service secret for service osd secret_id=10281
2019-12-03 10:33:29.819 7f010adf1700  0 auth: could not find secret_id=10281

OK, once you have all stopped laughing some advice would be appreciated.

-- 










*Kheiron Medical Technologies*

kheironmed.com 
 | supporting radiologists with deep learning


Kheiron Medical Technologies Ltd. is a registered company in England and 
Wales. This e-mail and its attachment(s) are intended for the above named 
only and are confidential. If they have come to you in error then you must 
take no action based upon them but contact us immediately. Any disclosure, 
copying, distribution or any action taken or omitted to be taken in 
reliance on it is prohibited and may be unlawful. Although this e-mail and 
its attachments are believed to be free of any virus, it is the 
responsibility of the recipient to ensure that they are virus free. If you 
contact us by e-mail then we will store your name and address to facilitate 
communications. Any statements contained herein are those of the individual 
and not the organisation.




Registered number: 10184103. Registered 
office: 2nd Floor Stylus Building, 116 Old Street, London, England, EC1V 9BG
___
ceph-users mailing list
ceph-users@lists.ceph.com
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com