cephx: control signaures for service vs cluster

Signed-off-by: Sage Weil <sage@inktank.com>

diff --git a/src/common/config_opts.h b/src/common/config_opts.h
index 1edd4f57f6eae37964714da13f7c3817744b36f3..78c132724b6b9b4759322387e155f233b483ce76 100644 (file)
--- a/src/common/config_opts.h
+++ b/src/common/config_opts.h
@@ -159,6 +159,8 @@ OPTION(auth_service_required, OPT_STR, "cephx")   // required by daemons of clie
 OPTION(auth_client_required, OPT_STR, "cephx, none")     // what clients require of daemons
 OPTION(auth_supported, OPT_STR, "")               // deprecated; default value for above if they are not defined.
 OPTION(cephx_require_signatures, OPT_BOOL, false) //  If true, don't talk to Cephx partners if they don't support message signing; off by default
+OPTION(cephx_cluster_require_signatures, OPT_BOOL, false)
+OPTION(cephx_service_require_signatures, OPT_BOOL, false)
 OPTION(cephx_sign_messages, OPT_BOOL, true)  // Default to signing session messages if supported
 OPTION(auth_mon_ticket_ttl, OPT_DOUBLE, 60*60*12)
 OPTION(auth_service_ticket_ttl, OPT_DOUBLE, 60*60)