NFS Ganesha export fails after adding Rados Gateway subusers

This document (7023860) is provided subject to the disclaimer at the end of this document.

Environment

SUSE Enterprise Storage 5.5

Ceph version 12.2.10 (or earlier).

Situation

After creating RGW (Rados GateWay) subusers, Ganesha NFS exports fail with:

ganesha.nfsd-xxxxxxx[main] create_export :FSAL :CRIT :Unable to mount RGW cluster for </path>.
ganesha.nfsd-xxxxxxx[main] create_export :FSAL :CRIT :Authorization Failed for user <user>
ganesha.nfsd-xxxxxxx[main] mdcache_fsal_create_export :FSAL :MAJ :Failed to call create_export on underlying FSAL RGW
ganesha.nfsd-xxxxxxx[main] fsal_cfg_commit :CONFIG :CRIT :Could not create export for (</dir>) to (</path>)

Resolution

Upgrade to at least Ceph version 12.2.11 or until an upgrade is possible, temporarily remove the newly created subuser(s).

Cause

Due to a bug in versions prior to Ceph 12.2.11, verification was done against the first key listed with:

# radosgw-admin user info --uid <user_id>

which in some cases can be that of the subuser(s).

Additional Information

http://tracker.ceph.com/issues/37855

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.