My current situation as I upgrade to v9.1.0 is that client.admin keyring seems
to work fine, for instance for ceph status command. But commands that use
client.bootstrap-osd such as
/usr/bin/ceph --cluster ceph --name client.bootstrap-osd --keyring
/var/lib/ceph/bootstrap-osd/ceph.keyring osd create --concise
a428120d-99ec-4a73-999f-75d8a6bfcb2e
are getting "EACCES: access denied"
with log entries in ceph.audit.log such as
2015-10-22 13:50:24.070249 mon.0 10.0.2.132:6789/0 33 : audit [INF]
from='client.? 10.0.2.132:0/263577121' entity='client.bootstrap-osd'
cmd=[{"prefix": "osd create", "uuid": "a428120d-99ec-4a73-999f-75d8a6bfcb2e"}]:
access denied
I tried setting
debug auth = 0
in ceph.conf but couldn't tell anything from that output.
Is there anything special I should look for here?
Note: I do have /var/lib/ceph and subdirectories owned by ceph:ceph
-- Tom
--
To unsubscribe from this list: send the line "unsubscribe ceph-devel" in
the body of a message to majord...@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
