Ceph

For obvious reasons, the MonClient has to authenticate with a monitor before talking to it. Right now this is accomplished by having it send an MAuth as the initial message when trying to establish a connection.

In discussions with Sage today I noticed that that meant that if the monitor is out of quorum, the client can't connect — MAuths are routed through the AuthMonitor PaxosService, which won't accept messages if its lease has run out. This prevents doing things like administrators checking out the current state.

So should the AuthMon be special-cased to allow local-only connections without holding a valid lease? Should this just be swallowed? Should the MonClient be hacked to not require sending MAuth when running certain commands, and those commands whitelisted for everybody on the monitor?