User management
Ceph Object Storage user management refers to users that are client applications of the Ceph Object Storage service; not the Ceph Object Gateway as a client application of the Ceph Storage Cluster. You must create a user, access key, and secret to enable client applications to interact with the Ceph Object Gateway service.
There are two user types:
-
User: The term 'user' reflects a user of the S3 interface.
-
Subuser: The term 'subuser' reflects a user of the Swift interface. A subuser is associated to a user .
You can create, modify, view, suspend, and remove users and subusers.
radosgw-admin command on a Ceph Object Gateway node within the master zone of the
master zone group to ensure that users synchronize throughout the multi-site cluster. DO NOT create,
modify, or delete users on a multi-site cluster from a secondary zone or a secondary zone
group.In addition to creating user and subuser IDs, you may add a display name and an email address for
a user. You can specify a key and secret, or generate a key and secret automatically. When
generating or specifying keys, note that user IDs correspond to an S3 key type and subuser IDs
correspond to a swift key type. Swift keys also have access levels of read,
write, readwrite and full.
User management command line syntax generally follows the pattern user COMMAND
USER_ID where USER_ID is either the --uid= option
followed by the user's ID (S3) or the --subuser= option followed by the user name
(Swift).
Syntax
radosgw-admin user <create|modify|info|rm|suspend|enable|check|stats> <--uid=USER_ID|--subuser=SUB_USER_NAME> [other-options]Additional options may be required depending on the command you issue.