According to the path restriction example, the filesystem name
should be cephfs_a, not cephfs. Converge on cephfs_a to avoid it
being confused with with the pool tag, which is always cephfs.
This was introduced in
160c4bfeb811 ("mon/AuthMonitor: Use new osd
auth caps for ceph fs authorize").
Signed-off-by: Ilya Dryomov <idryomov@gmail.com>
(cherry picked from commit
267c00012a6562daba385186908598f348db059a)
Conflicts:
doc/cephfs/client-auth.rst [ commit
e7a7cf429ef3 ("doc:
filesystem to file system") not in nautilus ]
ceph fs authorize *filesystem_name* client.*client_name* /*specified_directory* rw
-for example, to restrict client ``foo`` to writing only in the ``bar`` directory of filesystem ``cephfs``, use ::
+For example, to restrict client ``foo`` to writing only in the ``bar`` directory of filesystem ``cephfs_a``, use ::
- ceph fs authorize cephfs client.foo / r /bar rw
+ ceph fs authorize cephfs_a client.foo / r /bar rw
results in:
To completely restrict the client to the ``bar`` directory, omit the
root directory ::
- ceph fs authorize cephfs client.foo /bar rw
+ ceph fs authorize cephfs_a client.foo /bar rw
Note that if a client's read access is restricted to a path, they will only
be able to mount the filesystem when specifying a readable path in the