January 2019
Intermediate to advanced
606 pages
15h 1m
English
In the last recipe, we covered the authentication process used by Ceph. In this recipe, we will examine its authorization process. Once a user is authenticated, he is authorized for different types of access, activities, or roles. Ceph uses the term capabilities, which is abbreviated to caps. Capabilities are the rights a user gets that define the level of access they have to operate the cluster. The capability syntax looks as follows:
{daemon-type} 'allow {capability}' [{daemon-type} 'allow {capability}']
A detailed explanation of capability syntax is as follows:
mon 'allow rwx' or mon 'allow profile osd'
Read now
Unlock full access