October 2017
Intermediate to advanced
340 pages
9h 46m
English
Ceph provides Kerberos-type authentication for all clients and daemons of the cluster using the cephx protocol. Each entity that communicates with other cluster components needs to communicate using their respective keys. Any MON can authenticate a client based on the key it provides, then send it a session key to use when talking to other processes within the cluster, such as OSDs. Once the session expires the clients need to authenticate to the cluster again before they can resume talking to OSDs. The list of keys that authorized clients can use are retrieved by the auth list subcommand.
root@ceph-client0:~# ceph auth listinstalled auth entries:client.adminkey: AQBSdLVZN8DNDBAAIwIhHp/np5uUk9Rftzb5kg==caps: [mds] allow ...
Read now
Unlock full access