Hello! IFAIK, you have to access replivated pool with default data pool pointing to ec pool like that: [client.user] rbd_default_data_pool = pool.ec Now you can access pool.rbd, but actual data will be placed on pool.ec. Maybe it is another way to specify default data pool for using EC+Replicated RBD. Tue, Mar 03, 2020 at 04:03:21PM +0100, krienke wrote: > Hello, > > I do not know how to restrict a client.user to a certain rbd pool where > this pool has a replicated metadata pool pool.rbd and an erasure coded > data pool named pool.ec . I am running ceph nautilus. > > I tried this for a client.user: > > # ceph auth caps client.user mon 'profile rbd' osd 'profile rbd > pool=pool.rbd' > > # ceph auth get client.user > ./client.user > > # rbd -n client.user -k ./client.user create pool.rbd/test --size=1G > --data-pool=pool.ec > 2020-03-03 15:54:43.813 7f2817fff700 -1 > librbd::image::ValidatePoolRequest: handle_read_rbd_info: failed to read > RBD info: (1) Operation not permitted > 2020-03-03 15:54:43.813 7f2817fff700 -1 librbd::image::CreateRequest: > 0x563421cf4730 handle_validate_data_pool: failed to validate pool: (1) > Operation not permitted > rbd: create error: (1) Operation not permitted > > If I remove the "... pool=pool.rbd" -section in "ceph auth caps ..." > call from above everything works. > > Any idea how I can get this setup to work?