From: Patrick Donnelly <pdonnell@ibm.com>
Date: Sat, 6 Dec 2025 00:20:33 +0000 (-0500)
Subject: doc/dev/cephx: clarify which session key is used
X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=e54d923c21b7a3470dd336cbc06d8a74778f7b64;p=ceph-ci.git

doc/dev/cephx: clarify which session key is used

Signed-off-by: Patrick Donnelly <pdonnell@ibm.com>
---

diff --git a/doc/dev/cephx.rst b/doc/dev/cephx.rst
index e6619f54904..e4400b80107 100644
--- a/doc/dev/cephx.rst
+++ b/doc/dev/cephx.rst
@@ -123,7 +123,7 @@ same ``global_id``. Otherwise, the monitors assign a new ``global_id``::
 plus (for Nautilus and later)::
 
     u32 connection_secret_len      # in bytes
-    connection_secret^session_key
+    connection_secret^session_key  # using CEPH_ENTITY_TYPE_AUTH session key
     u32 other_keys_len             # bytes of other keys (encoded)
     other_keys {
       u8 encoding_version = 1
@@ -212,7 +212,7 @@ where::
       u64 global_id
       u32 service_id    # CEPH_ENTITY_TYPE_*
       CephxTicketBlob auth_ticket
-      {CephxAuthorize msg}^session_key
+      {CephxAuthorize msg}^session_key  # using CEPH_ENTITY_TYPE_AUTH session key
     }
 
     CephxAuthorize msg {
@@ -246,7 +246,7 @@ Where, as above,::
       u32 service_id      # CEPH_ENTITY_TYPE_{OSD,MGR,MDS}
       u8 msg_version (1)
       {CephXServiceTicket service_ticket}^principal_secret
-      CephxTicketBlob ticket_blob
+      {CephxTicketBlob ticket_blob}^session_key # using **old** CEPH_ENTITY_TYPE_AUTH session key
     }
 
     CephxServiceTicket {