Project

General

Profile

Actions
Copy link

Feature #1237

closed

mds caps limit mount to some subdir

Added by Wido den Hollander almost 13 years ago. Updated almost 8 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
% Done:

0%

Source:
Tags:
Backport:
Reviewed:
Affected Versions:
Component(FS):
Labels (FS):
Pull request ID:

Description

About a year ago the ceph.conf supported something like:

[:/foo]
 allow = 192.168.0.24

This way you could limit access to specific parts of the tree to clients.

Since Ceph is one big filesystem you would need such a feature to use Ceph safely for multiple tasks.

This could be connected to the name the client is authenticating with?

[:/]
  policy = deny
  allow = client.admin, client.server1, client.server2

[:/foo]
  policy = allow
  deny = client.server1

[:/alpha]
  policy = allow
  deny = client.server2

[:/beta]
  allow = client.server3

Something like that should cover it all?

Actions
Copy link

Also available in: Atom PDF