I figured out the problem, for anyone who runs into anything similar:
CEPH_USER
is expecting the user ID
(newadmin
), rather then the user Name
(client.newadmin
) that I originally provided
Ref: User Management — Ceph Documentation
Ceph has the concept of a
type
of user. For purposes of user management, the type will always beclient
. Ceph identifies users in a “period- delimited form” that consists of the user type and the user ID: for example,TYPE.ID
,client.admin
, orclient.user1
. The reason for user typing is that the Cephx protocol is used not only by clients but also non-clients, such as Ceph Monitors, OSDs, and Metadata Servers. Distinguishing the user type helps to distinguish between client users and other users. This distinction streamlines access control, user monitoring, and traceability.Sometimes Ceph’s user type might seem confusing, because the Ceph command line allows you to specify a user with or without the type, depending upon your command line usage. If you specify
--user
or--id
, you can omit the type. For example,client.user1
can be entered simply asuser1
. On the other hand, if you specify--name
or-n
, you must supply the type and name: for example,client.user1
. We recommend using the type and name as a best practice wherever possible.