[ceph-users] Re: Doing SAML2 Auth With Containerized mgrs

2021-11-02 Thread Edward R Huyer
> Sent: Wednesday, October 27, 2021 6:53 AM To: Edward R Huyer mailto:erh...@rit.edu>> Cc: Yury Kirsanov mailto:y.kirsa...@gmail.com>>; ceph-users@ceph.io<mailto:ceph-users@ceph.io> Subject: Re: [ceph-users] Re: Doing SAML2 Auth With Containerized mgrs Hi Edward, You don'

[ceph-users] Re: Doing SAML2 Auth With Containerized mgrs

2021-11-02 Thread Ernesto Puerta
cephadm) deployment”. > > > > Speaking of which, do you have any specific suggestions as to how to > approach this? I’m not familiar enough the details of the cephadm-deploy > containers specifically or containers in general to know where to start. > > > > *From:*

[ceph-users] Re: Doing SAML2 Auth With Containerized mgrs

2021-10-29 Thread Edward R Huyer
: Edward R Huyer Sent: Wednesday, October 27, 2021 9:31 AM To: 'Ernesto Puerta' Cc: Yury Kirsanov ; ceph-users@ceph.io Subject: RE: [ceph-users] Re: Doing SAML2 Auth With Containerized mgrs Thank you for the reply. Even if there’s a good reason for the CLI tool to not send the contents

[ceph-users] Re: Doing SAML2 Auth With Containerized mgrs

2021-10-27 Thread Edward R Huyer
@ceph.io Subject: Re: [ceph-users] Re: Doing SAML2 Auth With Containerized mgrs Hi Edward, You don't need to worry about keeping those certs persistently, the Ceph Dashboard does that for you (they're persisted inside the ceph-mon KV store). You just need to ensure that the paths you provide

[ceph-users] Re: Doing SAML2 Auth With Containerized mgrs

2021-10-27 Thread Ernesto Puerta
better. > > -Original Message- > From: Yury Kirsanov > Sent: Monday, October 25, 2021 12:17 PM > To: Edward R Huyer > Cc: ceph-users@ceph.io > Subject: [ceph-users] Re: Doing SAML2 Auth With Containerized mgrs > > Hi Edward, > Yes, you probably are right, I tho

[ceph-users] Re: Doing SAML2 Auth With Containerized mgrs

2021-10-25 Thread Edward R Huyer
No worries. It's a pretty specific problem, and the documentation could be better. -Original Message- From: Yury Kirsanov Sent: Monday, October 25, 2021 12:17 PM To: Edward R Huyer Cc: ceph-users@ceph.io Subject: [ceph-users] Re: Doing SAML2 Auth With Containerized mgrs Hi Edward

[ceph-users] Re: Doing SAML2 Auth With Containerized mgrs

2021-10-25 Thread Yury Kirsanov
how up in the SAML2 configuration. Maybe I’m > mistaken, but I think the SAML2 cert is separate from the regular HTTPS > cert? > > > > *From:* Yury Kirsanov > *Sent:* Monday, October 25, 2021 11:52 AM > *To:* Edward R Huyer > *Cc:* ceph-users@ceph.io > *Subject

[ceph-users] Re: Doing SAML2 Auth With Containerized mgrs

2021-10-25 Thread Edward R Huyer
Huyer Cc: ceph-users@ceph.io Subject: Re: [ceph-users] Doing SAML2 Auth With Containerized mgrs CAUTION: This message came from outside RIT. If you are unsure about the source or content of this message, please contact the RIT Service Center at 585-475-5000 or help.rit.edu before clicking links

[ceph-users] Re: Doing SAML2 Auth With Containerized mgrs

2021-10-25 Thread Yury Kirsanov
Hi Edward, You need to set configuration like this, assuming that certificate and key are on your local disk: ceph mgr module disable dashboard ceph dashboard set-ssl-certificate -i .crt ceph dashboard set-ssl-certificate-key -i .key ceph config-key set mgr/cephadm/grafana_crt -i .crt ceph