Re: [Qemu-devel] [RFC][BROKEN] rbd: Allow configuration of authentication scheme

2018-04-26 Thread Jeff Cody
On Wed, Apr 25, 2018 at 09:50:19AM +0200, Kevin Wolf wrote: > Am 24.04.2018 um 20:26 hat Jeff Cody geschrieben: > > On Fri, Apr 20, 2018 at 04:39:02PM +0200, Markus Armbruster wrote: > > > >> Ways to avoid the troublesome auth-cephx: {}: > > > >> > > > >> (A) Make auth-cephx a bool, rely on the

Re: [Qemu-devel] [RFC][BROKEN] rbd: Allow configuration of authentication scheme

2018-04-25 Thread Kevin Wolf
Am 24.04.2018 um 20:26 hat Jeff Cody geschrieben: > On Fri, Apr 20, 2018 at 04:39:02PM +0200, Markus Armbruster wrote: > > >> Ways to avoid the troublesome auth-cephx: {}: > > >> > > >> (A) Make auth-cephx a bool, rely on the other ways to provide the key > > >> > > >> (B) Make auth-cephx a bool

Re: [Qemu-devel] [RFC][BROKEN] rbd: Allow configuration of authentication scheme

2018-04-24 Thread Jeff Cody
On Fri, Apr 20, 2018 at 04:39:02PM +0200, Markus Armbruster wrote: > Kevin Wolf writes: > > > Am 18.04.2018 um 17:06 hat Markus Armbruster geschrieben: > >> Kevin Wolf writes: > >> > >> > The legacy command line syntax supports a "password-secret" option

Re: [Qemu-devel] [RFC][BROKEN] rbd: Allow configuration of authentication scheme

2018-04-20 Thread Markus Armbruster
Daniel P. Berrangé writes: > On Fri, Apr 20, 2018 at 04:50:38PM +0200, Markus Armbruster wrote: >> Daniel P. Berrangé writes: >> >> > On Fri, Apr 20, 2018 at 03:34:26PM +0200, Markus Armbruster wrote: >> >> Daniel P. Berrangé

Re: [Qemu-devel] [RFC][BROKEN] rbd: Allow configuration of authentication scheme

2018-04-20 Thread Daniel P . Berrangé
On Fri, Apr 20, 2018 at 04:50:38PM +0200, Markus Armbruster wrote: > Daniel P. Berrangé writes: > > > On Fri, Apr 20, 2018 at 03:34:26PM +0200, Markus Armbruster wrote: > >> Daniel P. Berrangé writes: > >> > >> > Yeah this is a mess - I wish we had

Re: [Qemu-devel] [RFC][BROKEN] rbd: Allow configuration of authentication scheme

2018-04-20 Thread Markus Armbruster
Daniel P. Berrangé writes: > On Fri, Apr 20, 2018 at 03:34:26PM +0200, Markus Armbruster wrote: >> Daniel P. Berrangé writes: >> >> > Yeah this is a mess - I wish we had never allowed users to pass a config >> > file, and had used /dev/null all the

Re: [Qemu-devel] [RFC][BROKEN] rbd: Allow configuration of authentication scheme

2018-04-20 Thread Markus Armbruster
Kevin Wolf writes: > Am 18.04.2018 um 17:06 hat Markus Armbruster geschrieben: >> Kevin Wolf writes: >> >> > The legacy command line syntax supports a "password-secret" option that >> > allows to pass an authentication key to Ceph. This was not supported in

Re: [Qemu-devel] [RFC][BROKEN] rbd: Allow configuration of authentication scheme

2018-04-20 Thread Daniel P . Berrangé
On Fri, Apr 20, 2018 at 03:34:26PM +0200, Markus Armbruster wrote: > Daniel P. Berrangé writes: > > > On Wed, Apr 18, 2018 at 06:52:08PM +0200, Kevin Wolf wrote: > >> Am 18.04.2018 um 18:34 hat Daniel P. Berrangé geschrieben: > >> > On Wed, Apr 18, 2018 at 06:28:23PM +0200,

Re: [Qemu-devel] [RFC][BROKEN] rbd: Allow configuration of authentication scheme

2018-04-20 Thread Markus Armbruster
Daniel P. Berrangé writes: > On Wed, Apr 18, 2018 at 06:52:08PM +0200, Kevin Wolf wrote: >> Am 18.04.2018 um 18:34 hat Daniel P. Berrangé geschrieben: >> > On Wed, Apr 18, 2018 at 06:28:23PM +0200, Kevin Wolf wrote: >> > > Am 18.04.2018 um 17:06 hat Markus Armbruster

Re: [Qemu-devel] [RFC][BROKEN] rbd: Allow configuration of authentication scheme

2018-04-18 Thread Daniel P . Berrangé
On Wed, Apr 18, 2018 at 06:52:08PM +0200, Kevin Wolf wrote: > Am 18.04.2018 um 18:34 hat Daniel P. Berrangé geschrieben: > > On Wed, Apr 18, 2018 at 06:28:23PM +0200, Kevin Wolf wrote: > > > Am 18.04.2018 um 17:06 hat Markus Armbruster geschrieben: > > > > > > Note that users can still

Re: [Qemu-devel] [RFC][BROKEN] rbd: Allow configuration of authentication scheme

2018-04-18 Thread Kevin Wolf
Am 18.04.2018 um 18:34 hat Daniel P. Berrangé geschrieben: > On Wed, Apr 18, 2018 at 06:28:23PM +0200, Kevin Wolf wrote: > > Am 18.04.2018 um 17:06 hat Markus Armbruster geschrieben: > > > > Note that users can still configure authentication methods with a > > > configuration file. They

Re: [Qemu-devel] [RFC][BROKEN] rbd: Allow configuration of authentication scheme

2018-04-18 Thread Daniel P . Berrangé
On Wed, Apr 18, 2018 at 06:28:23PM +0200, Kevin Wolf wrote: > Am 18.04.2018 um 17:06 hat Markus Armbruster geschrieben: > > Note that users can still configure authentication methods with a > > configuration file. They probably do that anyway if they use Ceph > > outside QEMU as

Re: [Qemu-devel] [RFC][BROKEN] rbd: Allow configuration of authentication scheme

2018-04-18 Thread Kevin Wolf
Am 18.04.2018 um 17:06 hat Markus Armbruster geschrieben: > Kevin Wolf writes: > > > The legacy command line syntax supports a "password-secret" option that > > allows to pass an authentication key to Ceph. This was not supported in > > QMP so far. > > We tried during

Re: [Qemu-devel] [RFC][BROKEN] rbd: Allow configuration of authentication scheme

2018-04-18 Thread Markus Armbruster
Kevin Wolf writes: > The legacy command line syntax supports a "password-secret" option that > allows to pass an authentication key to Ceph. This was not supported in > QMP so far. We tried during development of v2.9.0 (commit 0a55679b4a5), but reverted before the release:

Re: [Qemu-devel] [RFC][BROKEN] rbd: Allow configuration of authentication scheme

2018-04-18 Thread Kevin Wolf
Am 18.04.2018 um 16:16 hat Eric Blake geschrieben: > On 04/18/2018 08:50 AM, Kevin Wolf wrote: > > >>> @@ -3195,6 +3215,8 @@ > >>> '*conf': 'str', > >>> '*snapshot': 'str', > >>> '*user': 'str', > >>> +'*auth-none': 'bool', > >>> +

Re: [Qemu-devel] [RFC][BROKEN] rbd: Allow configuration of authentication scheme

2018-04-18 Thread Eric Blake
On 04/18/2018 08:50 AM, Kevin Wolf wrote: >>> @@ -3195,6 +3215,8 @@ >>> '*conf': 'str', >>> '*snapshot': 'str', >>> '*user': 'str', >>> +'*auth-none': 'bool', >>> +'*auth-cephx': 'RbdAuthCephx', >>> '*server':

Re: [Qemu-devel] [RFC][BROKEN] rbd: Allow configuration of authentication scheme

2018-04-18 Thread Kevin Wolf
Am 18.04.2018 um 15:26 hat Eric Blake geschrieben: > On 04/05/2018 12:06 PM, Kevin Wolf wrote: > > The legacy command line syntax supports a "password-secret" option that > > allows to pass an authentication key to Ceph. This was not supported in > > QMP so far. > > > > This patch introduces

Re: [Qemu-devel] [RFC][BROKEN] rbd: Allow configuration of authentication scheme

2018-04-18 Thread Kevin Wolf
Am 18.04.2018 um 15:21 hat Eric Blake geschrieben: > On 04/06/2018 03:04 AM, Kevin Wolf wrote: > > Am 05.04.2018 um 19:06 hat Kevin Wolf geschrieben: > >> The legacy command line syntax supports a "password-secret" option that > >> allows to pass an authentication key to Ceph. This was not

Re: [Qemu-devel] [RFC][BROKEN] rbd: Allow configuration of authentication scheme

2018-04-18 Thread Eric Blake
On 04/05/2018 12:06 PM, Kevin Wolf wrote: > The legacy command line syntax supports a "password-secret" option that > allows to pass an authentication key to Ceph. This was not supported in > QMP so far. > > This patch introduces authentication options in the QAPI schema, makes > them do the

Re: [Qemu-devel] [RFC][BROKEN] rbd: Allow configuration of authentication scheme

2018-04-18 Thread Eric Blake
On 04/06/2018 03:04 AM, Kevin Wolf wrote: > Am 05.04.2018 um 19:06 hat Kevin Wolf geschrieben: >> The legacy command line syntax supports a "password-secret" option that >> allows to pass an authentication key to Ceph. This was not supported in >> QMP so far. >> >> This patch introduces

Re: [Qemu-devel] [RFC][BROKEN] rbd: Allow configuration of authentication scheme

2018-04-06 Thread Kevin Wolf
Am 05.04.2018 um 19:06 hat Kevin Wolf geschrieben: > The legacy command line syntax supports a "password-secret" option that > allows to pass an authentication key to Ceph. This was not supported in > QMP so far. > > This patch introduces authentication options in the QAPI schema, makes > them do

[Qemu-devel] [RFC][BROKEN] rbd: Allow configuration of authentication scheme

2018-04-05 Thread Kevin Wolf
The legacy command line syntax supports a "password-secret" option that allows to pass an authentication key to Ceph. This was not supported in QMP so far. This patch introduces authentication options in the QAPI schema, makes them do the corresponding rados_conf_set() calls and adds