Project

General

Profile

Feature #9108

ceph auth get: Get multiple users

Added by John Wilkins over 9 years ago. Updated about 5 years ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
% Done:

0%

Source:
other
Tags:
Backport:
Reviewed:
Affected Versions:
Component(RADOS):
ceph cli
Pull request ID:

Description

The "ceph auth get <user>" command with the -o option is an ideal way to create a keyring for an individual user. However, there is no way to retrieve multiple users with ceph auth get in a single command. That means that when creating a keyring, a user has to do something like:

ceph-authtool --create-keyring /etc/ceph/ceph.keyring

Then, the user has to do:

ceph-authtool /etc/ceph/ceph.keyring --import-keyring ceph.client.username.keyring

Repeating the step for each end user.

So creating a "beatles.keyring" would look like this:

ceph-authtool --create-keyring /etc/ceph/beatles.keyring

ceph auth get client.john -o ceph.client.john.keyring
ceph auth get client.paul -o ceph.client.paul.keyring
ceph auth get client.george -o ceph.client.george.keyring
ceph auth get client.ringo -o ceph.client.ringo.keyring

Then, the user would have to import each of the users into
a single keyring.

ceph-authtool /etc/ceph/beatles.keyring --import-keyring ceph.client.john.keyring
ceph-authtool /etc/ceph/beatles.keyring --import-keyring ceph.client.paul.keyring
ceph-authtool /etc/ceph/beatles.keyring --import-keyring ceph.client.george.keyring
ceph-authtool /etc/ceph/beatles.keyring --import-keyring ceph.client.ringo.keyring

It would be nice if we had an option like:

ceph auth get-users client.john client.paul client.george client.ringo -o beatles.keyring

History

#1 Updated by Patrick Donnelly about 5 years ago

  • Project changed from Ceph to RADOS
  • Component(RADOS) ceph cli added

Also available in: Atom PDF