acl to glusterfs

- auth.allow 등록 - 기본이 * 이며 등록 되면 나머지 아이피는 인증 실패로 마운트 불가하다.

[root@reni-glusterfs01 brick1]# gluster volume set glusterfs-storage auth.allow 192.168.0.18
volume set: success

 

- allow 확인

[root@reni-ansible ~]# df -h
Filesystem                   Size  Used Avail Use% Mounted on
devtmpfs                     2.0G     0  2.0G   0% /dev
tmpfs                        2.0G     0  2.0G   0% /dev/shm
tmpfs                        2.0G  9.1M  2.0G   1% /run
tmpfs                        2.0G     0  2.0G   0% /sys/fs/cgroup
/dev/mapper/centos-root       46G  2.2G   43G   5% /
/dev/xvda1                  1014M  140M  875M  14% /boot
tmpfs                        393M     0  393M   0% /run/user/0
gluster01:glusterfs-storage   50G  545M   50G   2% /storage-volume
[root@reni-ansible ~]# umount /storage-volume
[root@reni-ansible ~]# df -h
Filesystem               Size  Used Avail Use% Mounted on
devtmpfs                 2.0G     0  2.0G   0% /dev
tmpfs                    2.0G     0  2.0G   0% /dev/shm
tmpfs                    2.0G  9.1M  2.0G   1% /run
tmpfs                    2.0G     0  2.0G   0% /sys/fs/cgroup
/dev/mapper/centos-root   46G  2.2G   43G   5% /
/dev/xvda1              1014M  140M  875M  14% /boot
tmpfs                    393M     0  393M   0% /run/user/0
[root@reni-ansible ~]# mount -t glusterfs gluster01:glusterfs-storage /storage-volume
[root@reni-ansible ~]# df -h
Filesystem                   Size  Used Avail Use% Mounted on
devtmpfs                     2.0G     0  2.0G   0% /dev
tmpfs                        2.0G     0  2.0G   0% /dev/shm
tmpfs                        2.0G  9.1M  2.0G   1% /run
tmpfs                        2.0G     0  2.0G   0% /sys/fs/cgroup
/dev/mapper/centos-root       46G  2.2G   43G   5% /
/dev/xvda1                  1014M  140M  875M  14% /boot
tmpfs                        393M     0  393M   0% /run/user/0
gluster01:glusterfs-storage   50G  545M   50G   2% /storage-volume
[root@reni-ansible ~]#

 

- reject 확인

[root@reni-proxy glusterfs]# mount -t glusterfs gluster01:glusterfs-storage /storage-volume
Mount failed. Check the log file  for more details.
[root@reni-proxy glusterfs]# tail -f storage-volume.log 
[2021-10-28 15:38:18.693573 +0000] E [fuse-bridge.c:6484:notify] 0-fuse: Server authenication failed. Shutting down.
[root@reni-proxy glusterfs]#


### reni-glusterfs01 서버에서 auth allow 추가
[root@reni-glusterfs01 ~]# gluster volume set glusterfs-storage auth.allow 192.168.0.18,192.168.0.17
volume set: success
[root@reni-glusterfs01 ~]# gluster volume get glusterfs-storage auth.allow
Option                                   Value                                  
------                                   -----                                  
auth.allow                               192.168.0.18,192.168.0.17              
[root@reni-glusterfs01 ~]# 


### reni-proxy 서버에서 auth allow 등록 후 확인
[root@reni-proxy /]# df -h
Filesystem                   Size  Used Avail Use% Mounted on
devtmpfs                     2.0G     0  2.0G   0% /dev
tmpfs                        2.0G     0  2.0G   0% /dev/shm
tmpfs                        2.0G  9.1M  2.0G   1% /run
tmpfs                        2.0G     0  2.0G   0% /sys/fs/cgroup
/dev/mapper/centos-root       46G  1.6G   44G   4% /
/dev/xvda1                  1014M  140M  875M  14% /boot
tmpfs                        393M     0  393M   0% /run/user/0
gluster01:glusterfs-storage   50G  545M   50G   2% /storage-volume
[root@reni-proxy /]#