Bug #48925
Updated by Sebastian Wagner over 3 years ago
Error after deploying iscsi daemons: <pre> debug 2020-12-20T21:01:53.910+0000 7f76f932e700 0 log_channel(audit) log [INF] : from='client.104309 -' entity='client.iscsi.iscsi.maint-3.njwqhz' cmd=[{"prefix": "service status", "format": "json"}]: access denied debug 2020-12-20T21:01:53.910+0000 7f76f932e700 -1 mgr.server reply reply (13) Permission denied access denied: does your client key have mgr caps? See http://docs.ceph.com/en/latest/mgr/administrator/#client-authentication </pre> It is needed to change default permission to: <pre> ceph auth caps <iscsi_daemon_client> mon 'profile rbd, allow command "osd blocklist", allow command "config-key get" with "key" prefix "iscsi/"' mgr 'allow *' osd 'allow rwx' </pre>