Project

General

Profile

Bug #20691

Updated by Nathan Cutler almost 7 years ago

<pre> 
 target149202175080:/home/ubuntu # ceph pg dump 
 Error EACCES: access denied' does your client key have mgr caps? See http://docs.ceph.com/docs/master/mgr/administrator/#client-authentication 
 </pre> 

 The admin keyring appears to have the mgr caps: 

 <pre> 
 target149202175080:/home/ubuntu # cat /etc/ceph/ceph.client.admin.keyring 
 [client.admin] 
         key = AQDwfW9ZAAAAABAATcA/JrAy7PAz7k+biXIQ3A== 
         caps mds = "allow *" 
         caps mon = "allow *" 
         caps osd = "allow *" 
         caps mgr = "allow *" 
 </pre> 

 Yet, it doesn't? 

 <pre> 
 target149202175089:/home/ubuntu # ceph auth get client.admin 
 exported keyring for client.admin 
 [client.admin] 
         key = AQDwfW9ZAAAAABAATcA/JrAy7PAz7k+biXIQ3A== 
         caps mds = "allow *" 
         caps mgr = "allow profile mds" 
         caps mon = "allow *" 
         caps osd = "allow *" 
 </pre>

Back