Bug #21027: vstart's -X option no longer works - Ceph - Ceph

Actions

Copy link

Bug #21027

closed

vstart's -X option no longer works

Added by Jeff Layton over 6 years ago. Updated over 6 years ago.

Status:

Resolved

Priority:

Normal

Assignee:

Patrick Donnelly

Category:

Target version:

% Done:

Source:

Development

Tags:

Backport:

luminous

Regression:

Severity:

3 - minor

Reviewed:

Affected Versions:

ceph-qa-suite:

Pull request ID:

Crash signature (v1):

Crash signature (v2):

Description

I did a pull and fresh rebuild from master this morning (HEAD == 8a63a83c6fc310cde4c23b9880335d16ab31838c), and since then whenever I try to use vstart with the -X option (to disable cephx), it results in a running cluster, but the client then is unable to connect with errors like this:

2017-08-17 12:21:05.191958 7f5b788d4700  0 -- 127.0.0.1:0/65887226 >> 127.0.0.1:6805/3339248996 conn(0x1004be8a0 :-1 s=STATE_CONNECTING_WAIT_CONNECT_REPLY_AUTH pgs=0 cs=0 l=0).handle_connect_reply connect got BADAUTHORIZER

If I run vstart without -X, it works just fine.

Related issues 1 (0 open — 1 closed)

Actions

Copy link

Updated by Greg Farnum over 6 years ago

Project changed from CephFS to Ceph

Actions

Copy link

Updated by Jeff Layton over 6 years ago

For the record, my vstart command looks like this:

../src/vstart.sh -l --mon_num 1 --osd_num 1 --mds_num 1 --memstore -n -X

If I remove the '-X' it works.

Actions

Copy link

Updated by Patrick Donnelly over 6 years ago

Assignee set to Patrick Donnelly
Source set to Development

Jeff did some testing and confirmed this was the PR that did it: https://github.com/ceph/ceph/pull/16891

Actions

Copy link

Updated by Yanhu Cao over 6 years ago

disable cephx then mds server show logs like this:

[root@ceph14 build]# grep "cannot decode auth caps" out/mds.a.log 
2017-08-18 09:02:22.412798 7f62e604a700  1 mds.client.guest ms_verify_authorizer: cannot decode auth caps bl of length 0
2017-08-18 09:02:30.860416 7f62e604a700  1 mds.client.guest ms_verify_authorizer: cannot decode auth caps bl of length 0
2017-08-18 09:02:30.860798 7f62e604a700  1 mds.client.guest ms_verify_authorizer: cannot decode auth caps bl of length 0
2017-08-18 09:02:47.756520 7f62e604a700  1 mds.client.guest ms_verify_authorizer: cannot decode auth caps bl of length 0
2017-08-18 09:02:47.756876 7f62e604a700  1 mds.client.guest ms_verify_authorizer: cannot decode auth caps bl of length 0
2017-08-18 09:03:20.524522 7f62e604a700  1 mds.client.guest ms_verify_authorizer: cannot decode auth caps bl of length 0
2017-08-18 09:03:20.524899 7f62e604a700  1 mds.client.guest ms_verify_authorizer: cannot decode auth caps bl of length 0

decode caps error code

} catch (buffer::error& e) {
      // Assume legacy auth, defaults to:
      //  * permit all filesystem ops
      //  * permit no `tell` ops
      dout(1) << __func__ << ": cannot decode auth caps bl of length " << caps_info.caps.length() << dendl;
      is_valid = false;
    }
...