Documentation #4373
closedcephx authentication docs needs change with additional info
0%
Description
http://ceph.com/docs/master/rados/operations/authentication/ - The given link under "CEPHX ADMINISTRATION" section needs change with additional info
The command used to generate a keyring file "sudo ceph auth get-or-create-key client.foo osd 'allow rw' mon 'allow r' > keyring.foo" is incorrect as the command only retrieves/creates the secret key and not the keyring in specified format.
It should be replaced by "sudo ceph auth get-or-create client.foo osd 'allow rw' mon 'allow r' > keyring.foo"
Also, while the doc mentions that the client and monitor cluster should have a copy of the keyring file, it needs to mention where in the client, the keyring file has to be copied to.It should be copied to /etc/ceph/<ceph.client.{name}.keyring>. The ceph.conf should be copied too to the client at /etc/ceph.
It would be nice to mention the exact steps for a client to access the cluster with cephx enabled.
Updated by John Wilkins about 11 years ago
- Status changed from New to In Progress
Updated by John Wilkins about 11 years ago
- Status changed from In Progress to Resolved
Fixed usage and added instructions for copying the keyring. http://ceph.com/docs/master/rados/operations/authentication/#cephx-administration I also added hyperlinks the the new auth configuration guide.