Does radosgw really need to talk to an MDS?

2012-07-02 Thread Florian Haas
Hi everyone, radosgw(8) states that the following capabilities must be granted to the user that radosgw uses to connect to RADOS. ceph-authtool -n client.radosgw.gateway --cap mon 'allow r' --cap osd 'allow rwx' --cap mds 'allow' /etc/ceph/keyring.radosgw.gateway Could someone explain why we

Re: Does radosgw really need to talk to an MDS?

2012-07-02 Thread Wido den Hollander
Hi, On 02-07-12 13:41, Florian Haas wrote: Hi everyone, radosgw(8) states that the following capabilities must be granted to the user that radosgw uses to connect to RADOS. ceph-authtool -n client.radosgw.gateway --cap mon 'allow r' --cap osd 'allow rwx' --cap mds 'allow'

Re: Does radosgw really need to talk to an MDS?

2012-07-02 Thread Florian Haas
On Mon, Jul 2, 2012 at 1:44 PM, Wido den Hollander w...@widodh.nl wrote: You are not allowing the RADOS Gateway to do anything on the MDS. There is no 'r', 'w' or 'x' permission which you are allowing. So there is nothing the rgw has access to on the MDS. Yep, so we might as well leave off

Re: Does radosgw really need to talk to an MDS?

2012-07-02 Thread Wido den Hollander
On 02-07-12 13:56, Florian Haas wrote: On Mon, Jul 2, 2012 at 1:44 PM, Wido den Hollander w...@widodh.nl wrote: You are not allowing the RADOS Gateway to do anything on the MDS. There is no 'r', 'w' or 'x' permission which you are allowing. So there is nothing the rgw has access to on the

Re: Does radosgw really need to talk to an MDS?

2012-07-02 Thread Sage Weil
On Mon, 2 Jul 2012, Wido den Hollander wrote: On 02-07-12 13:56, Florian Haas wrote: On Mon, Jul 2, 2012 at 1:44 PM, Wido den Hollander w...@widodh.nl wrote: You are not allowing the RADOS Gateway to do anything on the MDS. There is no 'r', 'w' or 'x' permission which you are

Re: Does radosgw really need to talk to an MDS?

2012-07-02 Thread Gregory Farnum
On Mon, Jul 2, 2012 at 4:44 AM, Wido den Hollander w...@widodh.nl wrote: Hi, On 02-07-12 13:41, Florian Haas wrote: Hi everyone, radosgw(8) states that the following capabilities must be granted to the user that radosgw uses to connect to RADOS. ceph-authtool -n client.radosgw.gateway