ceph:忘记 甚至 从ceph里删除了 ceph.client.admin密码,怎么处理?
如题:
CephX 的体系 ...
根、root、入口、超级 ... keyring: /var/lib/ceph/mon/ceph-${id}/keyring
通过它,我们可以访问ceph集群的数据。然后就可以通过 ceph auth 命令取处理了。
[root@node151 ceph]# ceph -n mon. --keyring /var/lib/ceph/mon/ceph-node151/keyring auth ls installed auth entries: mon. key: AQBsa81ml9mFDhAAkpp9B/JA/spNSlwnsber6g== caps: [mon] allow *
... todo ... 处理其他的keyring ...
#-----------------------------------------------------------------------------------------#
如果很不幸,连 /var/lib/ceph/mon/ceph-node151/keyring 都丢了。可以通过ceph-authtool创建一个
[root@node151 ceph-node151]# cd /var/lib/ceph/mon/ceph-node151 [root@node151 ceph-node151]# ceph-authtool -C keyring_restore -g -n mon. --cap mon "allow *" creating keyring_restore [root@node151 ceph-node151]# cat keyring_restore [mon.] key = AQBPMtBmFo9XJBAA30+I5QwSBXfnfcHapW9Dvg== caps mon = "allow *" [root@node151 ceph-node151]# cat keyring_old [mon.] key = AQBsa81ml9mFDhAAkpp9B/JA/spNSlwnsber6g== caps mon = "allow *" [root@node151 ceph-node151]#
# 必须重启ceph-mon,才能生效