Project

General

Profile

Feature #15071

mds: client: multifs: auth caps on client->MDS connections to limit by FSCID

Added by John Spray almost 4 years ago. Updated almost 2 years ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
% Done:

0%

Source:
other
Tags:
multifs
Backport:
Reviewed:
Affected Versions:
Component(FS):
Labels (FS):
Pull request ID:

Description

When a client is to be limited to a particular filesystem, it needs to not only be restricted to seeing that MDSMap, but also be restricted to only talking to MDSs that are currently holding a rank in the permitted filesystem.

This is the MDS equivalent of (http://tracker.ceph.com/issues/15070). If there is a neat way to avoid the need to duplicate the client's FSCID permissions in both the mon and mds caps then that would be a usability benefit, but currently each server can only see the client's caps for themselves (i.e. the mds can't see the mon caps of the client)


Related issues

Related to fs - Feature #15070: mon: client: multifs: auth caps on client->mon connections to limit their access to MDSMaps by FSCID Fix Under Review

History

#1 Updated by John Spray almost 4 years ago

  • Category set to 46

#2 Updated by Greg Farnum almost 4 years ago

  • Subject changed from multifs: auth caps on client->MDS connections to limit by FSCID to mds: client: multifs: auth caps on client->MDS connections to limit by FSCID
  • Category changed from 46 to 93

#3 Updated by Patrick Donnelly about 2 years ago

  • Related to Feature #15070: mon: client: multifs: auth caps on client->mon connections to limit their access to MDSMaps by FSCID added

#4 Updated by Patrick Donnelly almost 2 years ago

  • Category deleted (93)
  • Tags set to multifs

Also available in: Atom PDF