-
Notifications
You must be signed in to change notification settings - Fork 1.5k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Use arbitrary ceph user #800
Comments
Binary patching /data/haiwen/seafile-server-latest/seafile/lib/librados.so.2 (of course your username has to be (max) 8 characters long) is our current workaround. But of course not a real solution. |
On Tue, Aug 19, 2014 at 9:56 PM, egroeper notifications@github.com wrote:
|
Hi @egroeper I've tried to 'export CEPH_ARGS="--id foo --keyring=/etc/ceph/ceph.client.foo.keyring"'. That works find in our test environment. Did you miss the --keyring argument? |
@killing: Thanks for your help! |
I just export CEPH_ARGS before running seafile.sh. |
results in:
Whereas when I binary patch the library everything works. The username then has to be "seafi" as we are limited to 5 characters. By the way:
Of course I checked capabilities. seafi and seafile have the same ceph capabilities (permissions). |
Hi, After reading the source code of librados, I find that only the CEPH_KEYRING env variable is read in rados_create(). So it's necessary to add an option to seafile.conf for specifying the id. |
Good to hear we now know what is needed to fix this (and why). Since this part of the code is closed source, I'm awaiting your fix. |
Hi @egroeper |
This works. Thanks! |
Please apply the following patch to make it work with seafdav, too:
|
Thanks! Will be included in 4.0.4 version. |
I'm currently testing the pro version (3.0.6) of seafile.
The manual says, that I should copy the ceph admin keyring to the seafile node. But I created a separate keyring/user with lowered privileges and want to use that.
It seems like you are calling rados_create(&cluster, NULL), which means you don't set id/username. That way I would have to use the default admin user.
Could you add a configuration option in ccnet.conf to set username?
Is there any other possibility to set the username/id?
I tried to add 'export CEPH_ARGS="--id "' to seafile.sh, but that didn't work out.
The text was updated successfully, but these errors were encountered: