cephfs can be mounted even when keyring is modified
Modified the last letter of keyring, cephfs can be mounted with this wrong keyring and write/read operation is also allowed.
For example the original keyring is:
the modified keyring is:
A change pattern seems like change the "w" to "x" or "A" to "B", which always work.
Numbers of keyrings are tested and the problem remains.
How does ceph cluster verify the client's keyring, is it a 100% comparison?
#1 Updated by xiaomeng tu about 4 years ago
It turns out to be a base64 decoding problem. In base64 algorithm，“AQD6wjRZQPEcORAAeXPNPkN36VEiwc7Y/OBZcw==” and "AQD6wjRZQPEcORAAeXPNPkN36VEiwc7Y/OBZcx==" can be decoded into the same hex characters, which means this two keyring both can help the client get through the authentication send from the server end.