Project

General

Profile

Actions

Documentation #23594

open

auth: document what to do when locking client.admin out

Added by Niklas Hambuechen about 6 years ago. Updated about 6 years ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
% Done:

0%

Tags:
Backport:
Reviewed:
Affected Versions:
Pull request ID:

Description

I accidentally ran

ceph auth caps client.admin mgr 'allow *'

thus removing some critical caps from myself and now no ceph command works any more.

Right now the ceph docs don't seem to provide any background or direct help on how to fix that issue.

Actions #1

Updated by Niklas Hambuechen about 6 years ago

I found one way to fix it on the mailing list:

http://lists.ceph.com/pipermail/ceph-users-ceph.com/2017-January/015474.html

cd /var/lib/ceph/mon/monname

ceph -n mon. --keyring keyring  auth caps client.admin mds 'allow *' osd 'allow *' mon 'allow *'

But it would really be good to document this explicitly.

Actions #2

Updated by Patrick Donnelly about 6 years ago

  • Project changed from Ceph to RADOS
  • Subject changed from Document what to do when locking client.admin out to auth: document what to do when locking client.admin out
Actions

Also available in: Atom PDF