Deactivate cephx auth

[John.N]

Hello,

As the title suggest, I would like to deactivate Cephx authentication, as I want to remove the overhead.
My ceph networks are completely isolated, so no security implication.

I've already done it on my dev cluster and it works.

My question is: How should I go about disabling it on the production cluster in order to minimize downtime?

 

[John.N]

To extend, my thought is:

# ceph osd set noout
# ceph osd set norecover
# ceph osd set norebalance
# ceph osd set nobackfill
# ceph osd set nodown
# ceph osd set pause

Then disable cephx by:

[global]
         auth client required = none
         auth cluster required = none
         auth service required = none
         cephx_sign_messages = false

- Restart services
- Then unset pause etc in reverse order.
- It should take less than 30 sec.


What do you think?

 

[aljaxus]

Would you mind sharing your findings? Were you able to disable cephx without first shutting down all services (VMs)?