Re: [ceph-users] CephFS Path Restriction, can still read all files

2017-01-12 Thread John Spray
On Thu, Jan 12, 2017 at 9:27 AM, Boris Mattijssen wrote: > John, > > Do you know which kernel version I need? It seems to be not working with > 4.8.15 on coreos (4.8.15-coreos) (I also tested on 4.7.3). > I can confirm that it works using the ceph-fuse client, but I need the > kernel client to wor

Re: [ceph-users] CephFS Path Restriction, can still read all files

2017-01-12 Thread Boris Mattijssen
John, Do you know which kernel version I need? It seems to be not working with 4.8.15 on coreos (4.8.15-coreos) (I also tested on 4.7.3). I can confirm that it works using the ceph-fuse client, but I need the kernel client to work since I want to mount using Kubernetes ;) Btw, this is the error I

Re: [ceph-users] CephFS Path Restriction, can still read all files

2017-01-11 Thread Boris Mattijssen
Ah right, I was using the the kernel client on kernel 3.x Thanks for the answer. I'll try updating tomorrow and will let you know if it works! Cheers, Boris On Wed, Jan 11, 2017 at 1:03 PM John Spray wrote: > On Wed, Jan 11, 2017 at 11:39 AM, Boris Mattijssen > wrote: > > Hi Brukhard, > > > >

Re: [ceph-users] CephFS Path Restriction, can still read all files

2017-01-11 Thread John Spray
On Wed, Jan 11, 2017 at 11:39 AM, Boris Mattijssen wrote: > Hi Brukhard, > > Thanks for your answer. I've tried two things now: > * ceph auth get-or-create client.boris mon 'allow r' mds 'allow r path=/, > allow rw path=/boris' osd 'allow rw pool=cephfs_data'. This is according to > your suggestio

Re: [ceph-users] CephFS Path Restriction, can still read all files

2017-01-11 Thread Burkhard Linke
Hi, On 01/11/2017 12:39 PM, Boris Mattijssen wrote: Hi Brukhard, Thanks for your answer. I've tried two things now: * ceph auth get-or-create client.boris mon 'allow r' mds 'allow r path=/, allow rw path=/boris' osd 'allow rw pool=cephfs_data'. This is according to your suggestion. I am howe

Re: [ceph-users] CephFS Path Restriction, can still read all files

2017-01-11 Thread Boris Mattijssen
Hi Brukhard, Thanks for your answer. I've tried two things now: * ceph auth get-or-create client.boris mon 'allow r' mds 'allow r path=/, allow rw path=/boris' osd 'allow rw pool=cephfs_data'. This is according to your suggestion. I am however now still able to mount the root path and read all con

Re: [ceph-users] CephFS Path Restriction, can still read all files

2017-01-11 Thread Burkhard Linke
Hi, On 01/11/2017 11:02 AM, Boris Mattijssen wrote: Hi all, I'm trying to use/path restriction/ on CephFS, running a Ceph Jewel (ceph version 10.2.5) cluster. For this I'm using the command specified in the official docs (http://docs.ceph.com/docs/jewel/cephfs/client-auth/): ceph auth get-or

Re: [ceph-users] CephFS Path restriction

2015-12-08 Thread Dennis Kramer (DT)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ah, that explains alot. Thank you. Yes, it was a bit confusing for which version it applied to. Awesome addition by the way, I like the path parameter! Cheers. On 12/08/2015 03:15 PM, John Spray wrote: > On Tue, Dec 8, 2015 at 1:43 PM, Dennis Kramer

Re: [ceph-users] CephFS Path restriction

2015-12-08 Thread John Spray
On Tue, Dec 8, 2015 at 1:43 PM, Dennis Kramer (DT) wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > > > Hi, > > I'm trying to restrict clients to mount a specific path in CephFS. > I've been using the official doc for this: > http://docs.ceph.com/docs/master/cephfs/client-auth/ > > Aft