Bug #21027
closed
vstart's -X option no longer works
Added by Jeff Layton over 6 years ago.
Updated over 6 years ago.
Description
I did a pull and fresh rebuild from master this morning (HEAD == 8a63a83c6fc310cde4c23b9880335d16ab31838c), and since then whenever I try to use vstart with the -X option (to disable cephx), it results in a running cluster, but the client then is unable to connect with errors like this:
2017-08-17 12:21:05.191958 7f5b788d4700 0 -- 127.0.0.1:0/65887226 >> 127.0.0.1:6805/3339248996 conn(0x1004be8a0 :-1 s=STATE_CONNECTING_WAIT_CONNECT_REPLY_AUTH pgs=0 cs=0 l=0).handle_connect_reply connect got BADAUTHORIZER
If I run vstart without -X, it works just fine.
- Project changed from CephFS to Ceph
For the record, my vstart command looks like this:
../src/vstart.sh -l --mon_num 1 --osd_num 1 --mds_num 1 --memstore -n -X
If I remove the '-X' it works.
- Assignee set to Patrick Donnelly
- Source set to Development
disable cephx then mds server show logs like this:
[root@ceph14 build]# grep "cannot decode auth caps" out/mds.a.log
2017-08-18 09:02:22.412798 7f62e604a700 1 mds.client.guest ms_verify_authorizer: cannot decode auth caps bl of length 0
2017-08-18 09:02:30.860416 7f62e604a700 1 mds.client.guest ms_verify_authorizer: cannot decode auth caps bl of length 0
2017-08-18 09:02:30.860798 7f62e604a700 1 mds.client.guest ms_verify_authorizer: cannot decode auth caps bl of length 0
2017-08-18 09:02:47.756520 7f62e604a700 1 mds.client.guest ms_verify_authorizer: cannot decode auth caps bl of length 0
2017-08-18 09:02:47.756876 7f62e604a700 1 mds.client.guest ms_verify_authorizer: cannot decode auth caps bl of length 0
2017-08-18 09:03:20.524522 7f62e604a700 1 mds.client.guest ms_verify_authorizer: cannot decode auth caps bl of length 0
2017-08-18 09:03:20.524899 7f62e604a700 1 mds.client.guest ms_verify_authorizer: cannot decode auth caps bl of length 0
decode caps error code
} catch (buffer::error& e) {
// Assume legacy auth, defaults to:
// * permit all filesystem ops
// * permit no `tell` ops
dout(1) << __func__ << ": cannot decode auth caps bl of length " << caps_info.caps.length() << dendl;
is_valid = false;
}
...
what does the comment mean? should not add 'is_valid = false' even if cephx is enabled?
- Status changed from New to Fix Under Review
- Backport set to luminous
- Status changed from Fix Under Review to Pending Backport
- Copied to Backport #21105: luminous: vstart's -X option no longer works added
- Status changed from Pending Backport to Resolved
Also available in: Atom
PDF