Ceph

ceph 0.56.3

# ceph auth list
...

client.test
        key: AQBhXy5R6JJKCBAAzl4n8Ydl6lLJG9Dl3npqNA==
        caps: [mon] allow r
        caps: [osd] allow rwx pool=test
client.test-2
        key: AQC3Yi5ReMo+LhAAggxc2PpuexBwjAR3d3q/sg==
        caps: [mon] allow r
        caps: [osd] allow rwx pool=test-2

# cat /etc/ceph/file.keyring
[client.test]
  key = AQBhXy5R6JJKCBAAzl4n8Ydl6lLJG9Dl3npqNA==
  caps mon = "allow r" 
  caps osd = "allow rwx pool=test" 
# cat /etc/ceph/file2.keyring
[client.test-2]
  key = AQC3Yi5ReMo+LhAAggxc2PpuexBwjAR3d3q/sg==
  caps mon = "allow r" 
  caps osd = "allow rwx pool=test-2" 

# rbd map vol -p test --id test --keyring /etc/ceph/file.keyring
# rbd map vol -p test-2 --id test-2 --keyring /etc/ceph/file2.keyring
rbd: add failed: (1) Operation not permitted

[global]
  auth cluster required = cephx
  auth service required = cephx
  auth client required = cephx
  cephx require signatures = true
  keyring = /srv/ceph/keyring.admin

[mon]
  mon data = /srv/ceph/mon
  mon clock drift allowed = 0.5

[mon.n2c3]
  host = n2c3
  mon addr = 10.3.128.2:6789
[mon.n1c3]
  host = n1c3
  mon addr = 10.3.128.1:6789
[mon.n3c3]
  host = n3c3
  mon addr = 10.3.128.3:6789

[mds]
  debug mds = 1
  keyring = /srv/ceph/ceph-stage2/keyring.$name

[mds.n1c3]
  host = n1c3

[osd]
  osd data = /srv/ceph/ceph-data/$name
  osd journal = /srv/ceph/ceph-journal/$name.journal
  osd journal size = 10000
  osd scrub load threshold = 4
  keyring = /srv/ceph/ceph-stage2/keyring.$name
  debug osd = 1

[osd.1]
  host = n2c3
[osd.0]
  host = n1c3
[osd.2]
  host = n3c3