To create a new keyring containing a key for client.foo:
- $ ceph-authtool --create-keyring --id foo --gen-key keyring.bin
- creating keyring.bin
+ $ ceph-authtool --create-keyring --id foo --gen-key keyring
+ creating keyring
- $ ceph-authtool --create-keyring --name client.foo --gen-key keyring.bin
- creating keyring.bin
+ $ ceph-authtool --create-keyring --name client.foo --gen-key keyring
+ creating keyring
To associate some capabilities with the key (namely, the ability to mount a Ceph filesystem):
- $ ceph-authtool -n client.foo --cap mds 'allow' --cap osd 'allow rw pool=data' --cap mon 'allow r' keyring.bin
+ $ ceph-authtool -n client.foo --cap mds 'allow' --cap osd 'allow rw pool=data' --cap mon 'allow r' keyring
To display the contents of the keyring:
- $ ceph-authtool -l keyring.bin
+ $ ceph-authtool -l keyring
[client.foo]
\\tkey = [a-zA-Z0-9+/]+=* \(esc\) (re)
\tcaps mds = "allow" (esc)