https://tracker.ceph.com/https://tracker.ceph.com/favicon.ico2017-04-19T15:52:18ZCeph mgr - Bug #19629: mgr: set_config from python module crashes mgr (assertion failure due to access denied) https://tracker.ceph.com/issues/19629?journal_id=898312017-04-19T15:52:18ZSage Weilsage@newdream.net
<ul><li><strong>Priority</strong> changed from <i>Normal</i> to <i>Urgent</i></li></ul> mgr - Bug #19629: mgr: set_config from python module crashes mgr (assertion failure due to access denied) https://tracker.ceph.com/issues/19629?journal_id=901132017-04-21T05:45:43ZTim Serongtserong@suse.com
<ul></ul><p>The permission denied problem goes away if you give mgr full access to the mon. For example, in a vstart environment:</p>
<pre>
# bin/ceph auth caps mgr.x mon 'allow *' mds 'allow *' osd 'allow *'
updated caps for mgr.x
# bin/init-ceph restart mgr.x
# bin/ceph tell mgr enable_auth false
(...works fine, doesn't crash anymore...)
</pre>
<p>Originally it was "mon 'allow profile mgr'", now it's "mon 'allow *'". Is that too permissive?</p>
<p>Note that mgr must be restarted to pick up the auth caps change. Is that correct behaviour, or should it notice the changed caps by magic?</p> mgr - Bug #19629: mgr: set_config from python module crashes mgr (assertion failure due to access denied) https://tracker.ceph.com/issues/19629?journal_id=901202017-04-21T07:00:44ZTim Serongtserong@suse.com
<ul><li><strong>Status</strong> changed from <i>New</i> to <i>In Progress</i></li><li><strong>Assignee</strong> set to <i>Tim Serong</i></li></ul> mgr - Bug #19629: mgr: set_config from python module crashes mgr (assertion failure due to access denied) https://tracker.ceph.com/issues/19629?journal_id=901232017-04-21T08:07:30ZTim Serongtserong@suse.com
<ul><li><strong>Status</strong> changed from <i>In Progress</i> to <i>Fix Under Review</i></li></ul><p><a class="external" href="https://github.com/ceph/ceph/pull/14706">https://github.com/ceph/ceph/pull/14706</a></p>
<p>This PR doesn't help with mgr's auth caps, it just makes sure it logs the failure rather than crashing horribly.</p> mgr - Bug #19629: mgr: set_config from python module crashes mgr (assertion failure due to access denied) https://tracker.ceph.com/issues/19629?journal_id=905502017-04-28T21:41:36ZSage Weilsage@newdream.net
<ul><li><strong>Status</strong> changed from <i>Fix Under Review</i> to <i>Resolved</i></li></ul>