Hi Robert, That's not very good ! You can probably set that back to false on each mon with: ceph daemon mon.`hostname -s` config set auth_allow_insecure_global_id_reclaim true -- Dan On Thu, Apr 22, 2021 at 9:08 AM Robert Sander <r.sander@heinlein-support.de> wrote:

Hi,

I upgraded a test cluster to 15.2.11 and after the upgrade has been finished the cluster status was in HEALTH_WARN because of:

AUTH_INSECURE_GLOBAL_ID_RECLAIM_ALLOWED: mons are allowing insecure global_id reclaim

According to the documentation at https://docs.ceph.com/en/octopus/rados/operations/health-checks/#auth-insecu... I ran

ceph config set mon auth_allow_insecure_global_id_reclaim false

because no client was reporting using insecure global_ids.

Now "ceph -s" cannot connect to the cluster any more:

# ceph -s [errno 13] RADOS permission denied (error connecting to the cluster)

What should I do?

Regards -- Robert Sander Heinlein Consulting GmbH Schwedter Str. 8/9b, 10119 Berlin

http://www.heinlein-support.de

Tel: 030 / 405051-43 Fax: 030 / 405051-19

Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

_______________________________________________ ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an email to ceph-users-leave@ceph.io