]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph.git/commit
auth: 'ceph auth import -i' overwrites caps, if caps are not specified 13468/head
authorVikhyat Umrao <vumrao@redhat.com>
Thu, 16 Feb 2017 18:21:11 +0000 (23:51 +0530)
committerVikhyat Umrao <vumrao@redhat.com>
Sun, 19 Feb 2017 22:18:31 +0000 (03:48 +0530)
commit90144aa64c11a685b6a7cb3aafea75d427f569be
treef16a3d505a54bf1d8eb9eb740dbbbae6ad7c6785
parente09de2c313f5b1d13f4df11ca156a7124ebf4f55
auth: 'ceph auth import -i' overwrites caps, if caps are not specified
in given keyring file, should alert user and should not allow this import.
Because in 'ceph auth list' we keep all the keyrings with caps and importing
'client.admin' user keyring without caps locks the cluster with error[1]
because admin keyring caps are missing in 'ceph auth'.

[1] Error connecting to cluster: PermissionDeniedError

Fixes: http://tracker.ceph.com/issues/18932
Signed-off-by: Vikhyat Umrao <vumrao@redhat.com>
qa/workunits/cephtool/test.sh
src/mon/AuthMonitor.cc
src/mon/AuthMonitor.h