>
Sent: Wednesday, October 27, 2021 6:53 AM
To: Edward R Huyer mailto:erh...@rit.edu>>
Cc: Yury Kirsanov mailto:y.kirsa...@gmail.com>>;
ceph-users@ceph.io<mailto:ceph-users@ceph.io>
Subject: Re: [ceph-users] Re: Doing SAML2 Auth With Containerized mgrs
Hi Edward,
You don'
cephadm) deployment”.
>
>
>
> Speaking of which, do you have any specific suggestions as to how to
> approach this? I’m not familiar enough the details of the cephadm-deploy
> containers specifically or containers in general to know where to start.
>
>
>
> *From:*
: Edward R Huyer
Sent: Wednesday, October 27, 2021 9:31 AM
To: 'Ernesto Puerta'
Cc: Yury Kirsanov ; ceph-users@ceph.io
Subject: RE: [ceph-users] Re: Doing SAML2 Auth With Containerized mgrs
Thank you for the reply. Even if there’s a good reason for the CLI tool to not
send the contents
@ceph.io
Subject: Re: [ceph-users] Re: Doing SAML2 Auth With Containerized mgrs
Hi Edward,
You don't need to worry about keeping those certs persistently, the Ceph
Dashboard does that for you (they're persisted inside the ceph-mon KV store).
You just need to ensure that the paths you provide
better.
>
> -Original Message-
> From: Yury Kirsanov
> Sent: Monday, October 25, 2021 12:17 PM
> To: Edward R Huyer
> Cc: ceph-users@ceph.io
> Subject: [ceph-users] Re: Doing SAML2 Auth With Containerized mgrs
>
> Hi Edward,
> Yes, you probably are right, I tho
No worries. It's a pretty specific problem, and the documentation could be
better.
-Original Message-
From: Yury Kirsanov
Sent: Monday, October 25, 2021 12:17 PM
To: Edward R Huyer
Cc: ceph-users@ceph.io
Subject: [ceph-users] Re: Doing SAML2 Auth With Containerized mgrs
Hi Edward
how up in the SAML2 configuration. Maybe I’m
> mistaken, but I think the SAML2 cert is separate from the regular HTTPS
> cert?
>
>
>
> *From:* Yury Kirsanov
> *Sent:* Monday, October 25, 2021 11:52 AM
> *To:* Edward R Huyer
> *Cc:* ceph-users@ceph.io
> *Subject
Huyer
Cc: ceph-users@ceph.io
Subject: Re: [ceph-users] Doing SAML2 Auth With Containerized mgrs
CAUTION: This message came from outside RIT. If you are unsure about the source
or content of this message, please contact the RIT Service Center at
585-475-5000 or help.rit.edu before clicking links
Hi Edward,
You need to set configuration like this, assuming that certificate and key
are on your local disk:
ceph mgr module disable dashboard
ceph dashboard set-ssl-certificate -i .crt
ceph dashboard set-ssl-certificate-key -i .key
ceph config-key set mgr/cephadm/grafana_crt -i .crt
ceph