ceph:忘记 甚至 从ceph里删除了 ceph.client.admin密码,怎么处理?

如题:

CephX 的体系 ...

根、root、入口、超级 ...  keyring: /var/lib/ceph/mon/ceph-${id}/keyring

 通过它,我们可以访问ceph集群的数据。然后就可以通过 ceph auth 命令取处理了。

[root@node151 ceph]# ceph -n mon. --keyring /var/lib/ceph/mon/ceph-node151/keyring  auth ls
installed auth entries:

mon.
    key: AQBsa81ml9mFDhAAkpp9B/JA/spNSlwnsber6g==
    caps: [mon] allow *

 ...  todo ... 处理其他的keyring ...

#-----------------------------------------------------------------------------------------#

如果很不幸,连 /var/lib/ceph/mon/ceph-node151/keyring 都丢了。可以通过ceph-authtool创建一个

[root@node151 ceph-node151]# cd /var/lib/ceph/mon/ceph-node151
[root@node151 ceph-node151]# ceph-authtool -C keyring_restore -g -n mon. --cap mon "allow *"
creating keyring_restore
[root@node151 ceph-node151]# cat keyring_restore 
[mon.]
    key = AQBPMtBmFo9XJBAA30+I5QwSBXfnfcHapW9Dvg==
    caps mon = "allow *"
[root@node151 ceph-node151]# cat keyring_old 
[mon.]
    key = AQBsa81ml9mFDhAAkpp9B/JA/spNSlwnsber6g==
    caps mon = "allow *"
[root@node151 ceph-node151]# 
# 必须重启ceph-mon,才能生效

 

posted on 2024-08-29 16:06  jinzhenshui  阅读(112)  评论(0)    收藏  举报