Project

General

Profile

Actions

Bug #2904

closed

ceph-authtool: Adds keys on typos, expected error message

Added by Anonymous almost 12 years ago. Updated almost 8 years ago.

Status:
Resolved
Priority:
Low
Assignee:
Category:
-
Target version:
-
% Done:

0%

Source:
Development
Tags:
Backport:
Regression:
Severity:
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):

Description

$ cat >temp.keyring <<EOF
[osd.0]
    key = AQD0TGVNSG0jHRAASDDwan8hOOZBxxZ3aMMVdg==
    auid = 18446744073709551615
EOF
$ ./ceph-authtool temp.keyring --cap mon "allow *" --cap osd "allow *" 
$ cat temp.keyring
[osd.0]
    key = AQD0TGVNSG0jHRAASDDwan8hOOZBxxZ3aMMVdg==
    auid = 18446744073709551615
[client.admin]
    key = AAAAAAAAAAAAAAAA
    auid = 18446744073709551615
    caps mon = "allow *" 
    caps osd = "allow *" 

This can hurt you either through forgetting --name=, or typoing it, e.g. --name=ods.0

Since I did not specify --gen-key, I expected an error message, something like:

$ ./ceph-authtool temp.keyring --cap mon "allow *" --cap osd "allow *" 
ceph-authtool: Key does not exist: client.admin
$ ./ceph-authtool temp.keyring --name=ods.0 --cap mon "allow *" --cap osd "allow *" 
ceph-authtool: Key does not exist: ods.0
Actions

Also available in: Atom PDF