From bc858eac636cdee162a6a3df0819e10a02d353e0 Mon Sep 17 00:00:00 2001 From: Sage Weil Date: Sun, 12 Aug 2018 15:34:20 -0500 Subject: [PATCH] PendingReleaseNotes: note about auid support removal Signed-off-by: Sage Weil --- PendingReleaseNotes | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/PendingReleaseNotes b/PendingReleaseNotes index 788f1ca3a9d..bf44d588722 100644 --- a/PendingReleaseNotes +++ b/PendingReleaseNotes @@ -44,6 +44,21 @@ removed because they are redundant; please use the ``ceph osd pool create`` and ``ceph osd pool rm`` commands instead. +* The ``auid`` property for cephx users and RADOS pools has been + removed. This was an undocumented and partially implemented + capability that allowed cephx users to map capabilities to RADOS + pools that they "owned". Because there are no users we have removed + this support. If any cephx capabilities exist in the cluster that + restrict based on auid then they will no longer parse, and the + cluster will report a health warning like:: + + AUTH_BAD_CAPS 1 auth entities have invalid capabilities + client.bad osd capability parse failed, stopped at 'allow rwx auid 123' of 'allow rwx auid 123' + + The capability can be adjusted with the ``ceph auth caps`` command. For example,:: + + ceph auth caps client.bad osd 'allow rwx pool foo' + -- 2.39.5