* ceph keyring
@ 2013-02-20 9:01 Gandalf Corvotempesta
2013-02-25 8:53 ` Wido den Hollander
0 siblings, 1 reply; 2+ messages in thread
From: Gandalf Corvotempesta @ 2013-02-20 9:01 UTC (permalink / raw)
To: ceph-devel
I'm trying to configure RGW following this guide:
http://ceph.com/docs/master/radosgw/config/
I have some questions about keyring. Should keyring files copied on
each cluster node?
For example, these commands:
sudo ceph-authtool --create-keyring /etc/ceph/keyring.radosgw.gateway
sudo chmod +r /etc/ceph/keyring.radosgw.gateway
sudo ceph-authtool /etc/ceph/keyring.radosgw.gateway -n
client.radosgw.gateway --gen-key
sudo ceph-authtool -n client.radosgw.gateway --cap osd 'allow rwx'
--cap mon 'allow r' /etc/ceph/keyring.radosgw.gateway
sudo ceph -k /etc/ceph/ceph.keyring auth add client.radosgw.gateway -i
/etc/ceph/keyring.radosgw.gateway
on which node should be ran and the generated keyfile, should be
synced on each node?
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: ceph keyring
2013-02-20 9:01 ceph keyring Gandalf Corvotempesta
@ 2013-02-25 8:53 ` Wido den Hollander
0 siblings, 0 replies; 2+ messages in thread
From: Wido den Hollander @ 2013-02-25 8:53 UTC (permalink / raw)
To: Gandalf Corvotempesta; +Cc: ceph-devel
On 02/20/2013 10:01 AM, Gandalf Corvotempesta wrote:
> I'm trying to configure RGW following this guide:
> http://ceph.com/docs/master/radosgw/config/
>
> I have some questions about keyring. Should keyring files copied on
> each cluster node?
> For example, these commands:
>
> sudo ceph-authtool --create-keyring /etc/ceph/keyring.radosgw.gateway
> sudo chmod +r /etc/ceph/keyring.radosgw.gateway
> sudo ceph-authtool /etc/ceph/keyring.radosgw.gateway -n
> client.radosgw.gateway --gen-key
> sudo ceph-authtool -n client.radosgw.gateway --cap osd 'allow rwx'
> --cap mon 'allow r' /etc/ceph/keyring.radosgw.gateway
> sudo ceph -k /etc/ceph/ceph.keyring auth add client.radosgw.gateway -i
> /etc/ceph/keyring.radosgw.gateway
>
> on which node should be ran and the generated keyfile, should be
> synced on each node?
> --
You need to copy the keyring file to the node where the RGW will be running.
The RGW will use the key to authenticate with the cluster.
Wido
P.S.: This would be something for the -users list.
> To unsubscribe from this list: send the line "unsubscribe ceph-devel" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at http://vger.kernel.org/majordomo-info.html
>
--
Wido den Hollander
42on B.V.
Phone: +31 (0)20 700 9902
Skype: contact42on
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2013-02-25 8:53 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2013-02-20 9:01 ceph keyring Gandalf Corvotempesta
2013-02-25 8:53 ` Wido den Hollander
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.