blob: 3201aa37b2a5332194676d0abf3dd4a720c1fb9b (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
|
$ ceph-authtool
ceph-authtool: -h or --help for usage
[1]
# demonstrate that manpage examples fail without config
# TODO fix the manpage
$ ceph-authtool --create-keyring --name client.foo --gen-key keyring
creating keyring
# work around the above
$ touch ceph.conf
To create a new keyring containing a key for client.foo:
$ ceph-authtool --create-keyring --id foo --gen-key keyring
creating keyring
$ ceph-authtool --create-keyring --name client.foo --gen-key keyring
creating keyring
To associate some capabilities with the key (namely, the ability to mount a Ceph filesystem):
$ ceph-authtool -n client.foo --cap mds 'allow' --cap osd 'allow rw pool=data' --cap mon 'allow r' keyring
To display the contents of the keyring:
$ ceph-authtool -l keyring
[client.foo]
\\tkey = [a-zA-Z0-9+/]+=* \(esc\) (re)
\tcaps mds = "allow" (esc)
\tcaps mon = "allow r" (esc)
\tcaps osd = "allow rw pool=data" (esc)
|
