Project

General

Profile

Actions
Copy link

Feature #15070

closed

mon: client: multifs: auth caps on client->mon connections to limit their access to MDSMaps by FSCID

Added by John Spray about 8 years ago. Updated over 3 years ago.

Status:
Resolved
Priority:
High
Assignee:
Rishabh Dave
Category:
-
Target version:
Ceph - v16.0.0
% Done:

0%

Source:
Development
Tags:
Backport:
Reviewed:
Affected Versions:
Component(FS):
Common/Protocol, MDSMonitor, qa-suite
Labels (FS):
multifs, task(medium)
Pull request ID:
32581

Description

Currently clients with 'mds allow r' capabilities can see any MDSMap.

We would like to be able to craft client auth caps that restrict them to only being able to see a specific set of MDSMaps. This would also restrict their ability to look up FSCIDs from filesystem names (http://tracker.ceph.com/issues/15067)

I think something like "mds r fscid=<fscid>" would make sense.

Related issues 3 (1 open — 2 closed)

Related to CephFS - Feature #15071: mds: client: multifs: auth caps on client->MDS connections to limit by FSCIDNew03/11/2016

Actions
Related to CephFS - Feature #47264: "fs authorize" subcommand should work for multiple FSs tooResolvedRishabh Dave

Actions
Blocks CephFS - Feature #22477: multifs: remove multifs experimental warningsResolvedPatrick Donnelly

Actions
Actions
Copy link
 #1

Updated by Greg Farnum almost 8 years ago

  • Subject changed from multifs: auth caps on client->mon connections to limit their access to MDSMaps by FSCID to mon: client: multifs: auth caps on client->mon connections to limit their access to MDSMaps by FSCID
  • Category changed from 46 to 93
Actions
Copy link
 #2

Updated by Patrick Donnelly over 6 years ago

  • Blocks Feature #22477: multifs: remove multifs experimental warnings added
Actions
Copy link
 #3

Updated by Patrick Donnelly over 6 years ago

  • Related to Feature #15071: mds: client: multifs: auth caps on client->MDS connections to limit by FSCID added
Actions
Copy link
 #4

Updated by Patrick Donnelly over 6 years ago

  • Blocks deleted (Feature #22477: multifs: remove multifs experimental warnings)
Actions
Copy link
 #5

Updated by Patrick Donnelly about 6 years ago

  • Category deleted (93)
  • Tags set to multifs
Actions
Copy link
 #6

Updated by Patrick Donnelly almost 6 years ago

  • Blocks Feature #22477: multifs: remove multifs experimental warnings added
Actions
Copy link
 #7

Updated by Patrick Donnelly almost 6 years ago

  • Priority changed from Normal to High
  • Target version set to v14.0.0
  • Source changed from other to Development
  • Tags deleted (multifs)
  • Component(FS) Common/Protocol, MDSMonitor, qa-suite added
  • Labels (FS) multifs, task(medium) added
Actions
Copy link
 #8

Updated by Patrick Donnelly about 5 years ago

  • Assignee set to Zheng Yan
  • Start date deleted (03/11/2016)
Actions
Copy link
 #9

Updated by Patrick Donnelly about 5 years ago

  • Assignee deleted (Zheng Yan)
Actions
Copy link
 #10

Updated by Patrick Donnelly about 5 years ago

  • Assignee set to Douglas Fuller
Actions
Copy link
 #11

Updated by Patrick Donnelly about 5 years ago

  • Description updated (diff)
Actions
Copy link
 #12

Updated by Patrick Donnelly about 5 years ago

  • Target version changed from v14.0.0 to v15.0.0
Actions
Copy link
 #13

Updated by Douglas Fuller about 5 years ago

  • Status changed from New to Fix Under Review
Actions
Copy link
 #14

Updated by Patrick Donnelly about 5 years ago

  • Pull request ID set to 26855
Actions
Copy link
 #15

Updated by Ramana Raja over 4 years ago

  • Assignee changed from Douglas Fuller to Ramana Raja
Actions
Copy link
 #16

Updated by Douglas Fuller over 4 years ago

also see branch wip-djf-15070-rebase on https://github.com/fullerdj/ceph/

Actions
Copy link
 #17

Updated by Patrick Donnelly over 4 years ago

  • Assignee changed from Ramana Raja to Rishabh Dave

Giving this to Rishabh as discussed.

Actions
Copy link
 #18

Updated by Patrick Donnelly about 4 years ago

  • Pull request ID changed from 26855 to 32581
Actions
Copy link
 #19

Updated by Patrick Donnelly about 4 years ago

  • Target version changed from v15.0.0 to v16.0.0
Actions
Copy link
 #20

Updated by Rishabh Dave over 3 years ago

  • Related to Feature #47264: "fs authorize" subcommand should work for multiple FSs too added
Actions
Copy link
 #21

Updated by Patrick Donnelly over 3 years ago

  • Status changed from Fix Under Review to Resolved
Actions
Copy link

Also available in: Atom PDF