mds: expose keyring for authenticater verification

Signed-off-by: Sage Weil <sage@redhat.com>

diff --git a/src/mds/MDSDaemon.cc b/src/mds/MDSDaemon.cc
index cd6bc4e032e712c8694bba08f0e6ee29c89adc30..9e8c8fbb5d9e3cb3102f749bc7974e45386ebe07 100644 (file)
--- a/src/mds/MDSDaemon.cc
+++ b/src/mds/MDSDaemon.cc
@@ -1341,6 +1341,11 @@ bool MDSDaemon::ms_verify_authorizer(Connection *con, int peer_type,
   return true;
 }
 
+KeyStore *MDSDaemon::ms_get_auth1_authorizer_keystore()
+{
+  return monc->rotating_secrets.get();
+}
+
 int MDSDaemon::ms_handle_authentication(Connection *con)
 {
   int ret = 0;

diff --git a/src/mds/MDSDaemon.h b/src/mds/MDSDaemon.h
index bd8f89e619b997999eee212a7d4545d6de387be0..0043cb5f750b82687eef481ebe4ea687a81d9e7e 100644 (file)
--- a/src/mds/MDSDaemon.h
+++ b/src/mds/MDSDaemon.h
@@ -116,6 +116,7 @@ class MDSDaemon : public Dispatcher, public md_config_obs_t {
                            bool& isvalid, CryptoKey& session_key,
                            std::unique_ptr<AuthAuthorizerChallenge> *challenge) override;
   int ms_handle_authentication(Connection *con) override;
+  KeyStore *ms_get_auth1_authorizer_keystore() override;
   void ms_handle_accept(Connection *con) override;
   void ms_handle_connect(Connection *con) override;
   bool ms_handle_reset(Connection *con) override;