From: Zac Dover Date: Thu, 23 Nov 2023 04:59:24 +0000 (+1000) Subject: doc/rados: edit "client can't connect..." X-Git-Tag: testing/wip-pdonnell-testing-20240430.123648-reef-debug~408^2 X-Git-Url: http://git.apps.os.sepia.ceph.com/?a=commitdiff_plain;h=86ca1eddb652f2310045eccd42755da910e90e4b;p=ceph-ci.git doc/rados: edit "client can't connect..." Edit the section "Client can't connect or mount" in the file doc/rados/troubleshooting/troubleshooting-mon.rst. Signed-off-by: Zac Dover (cherry picked from commit ec298091b5e754293e798c90fc8afc3e4504d632) --- diff --git a/doc/rados/troubleshooting/troubleshooting-mon.rst b/doc/rados/troubleshooting/troubleshooting-mon.rst index 1550aaccd80..c28a38da568 100644 --- a/doc/rados/troubleshooting/troubleshooting-mon.rst +++ b/doc/rados/troubleshooting/troubleshooting-mon.rst @@ -481,12 +481,13 @@ Clock Skew Questions and Answers Client Can't Connect or Mount ----------------------------- -Check your IP tables. Some operating-system install utilities add a ``REJECT`` -rule to ``iptables``. ``iptables`` rules will reject all clients other than -``ssh`` that try to connect to the host. If your monitor host's IP tables have -a ``REJECT`` rule in place, clients that are connecting from a separate node -will fail and will raise a timeout error. Any ``iptables`` rules that reject -clients trying to connect to Ceph daemons must be addressed. For example:: +If a client can't connect to the cluster or mount, check your iptables. Some +operating-system install utilities add a ``REJECT`` rule to ``iptables``. +``iptables`` rules will reject all clients other than ``ssh`` that try to +connect to the host. If your monitor host's iptables have a ``REJECT`` rule in +place, clients that connect from a separate node will fail, and this will raise +a timeout error. Look for ``iptables`` rules that reject clients that are +trying to connect to Ceph daemons. For example:: REJECT all -- anywhere anywhere reject-with icmp-host-prohibited