[Bug 1847822] Re: CephFS authorize fails with unknown cap type
gerald.yang at canonical.com
Tue Dec 3 07:29:32 UTC 2019
** Tags removed: verification-done
** Tags added: verification-needed
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to Ubuntu Cloud Archive.
CephFS authorize fails with unknown cap type
Status in Ubuntu Cloud Archive:
Status in Ubuntu Cloud Archive queens series:
Status in ceph package in Ubuntu:
Status in ceph source package in Bionic:
Attempting to provide access to a user within Ceph to a specific mount
path fails with unknown cap type. This appears to be due to the
monitor not knowing how to validate the caps that are provided with
the mount path per upstream bug https://tracker.ceph.com/issues/39395
and subsequent pull requests.
This is fixed in Mimic (13.1.0+) and included in the current Luminous
devel release (upcoming 12.2.13).
Steps to recreate:
1. Install ceph w/ ceph-fs.
2. Mount ceph filesystem and create subdirectory for restricting access
$ ceph-fuse -k /etc/ceph/ceph.client.foo.keyring --id foo -m 10.5.0.5:6789 /mnt/ceph-fs
$ mkdir /mnt/ceph-fs/bar
3. Authorize access for ceph user to rw a directory
$ ceph fs authorize ceph-fs client.foo /bar rw
The authorize command to succeed
Error EINVAL: unknown cap type '/bar'
Regression potential is low as this has already been fixed upstream
and has seen additional testing without additional problem reports
from the change. The change does affect the validation of
capabilities, so if a problem were to arise it would likely be in the
verification of capabilities when the code is parsing.
Upstream pull-request: https://github.com/ceph/ceph/pull/28666
To manage notifications about this bug go to:
More information about the Ubuntu-openstack-bugs