SUSE Support

Here When You Need Us

Cephfs authorize command fails with a cap error

This document (000001014) is provided subject to the disclaimer at the end of this document.


Ceph 12.2.12+git.1568024032.02236657ca-2.39.1


When attempting to authorize a cephfs client using for example:
ceph fs authorize cephfs client.suse /some_dir rw

This fails with:
Error EINVAL: unknown cap type '/some_dir'


The command only simplifies the creation of the auth key required for the specified client access. Workaround then is to instead manually create the key for the client. For example:
ceph auth get-or-create client.my_cephfs_client mon 'allow r' mds 'allow r, allow rw path=/some_dir' osd 'allow rwx pool=cephfs_data' -o client.<my_cephfs_client>.key

The above example assumes the relevant CephFS pool is "cephfs_data" (the default data pool for CephFS), and that the client (my_cephfs_client) requires RW access to the specified CephFS directory (the "path=" statement).


This is due to a bug that should be fixed when Ceph 12.2.13 is released.


This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.

  • Document ID:000001014
  • Creation Date: 31-Jan-2020
  • Modified Date:23-Oct-2020
    • SUSE Enterprise Storage

< Back to Support Search

For questions or concerns with the SUSE Knowledgebase please contact: tidfeedback[at]

SUSE Support Forums

Get your questions answered by experienced Sys Ops or interact with other SUSE community experts.

Support Resources

Learn how to get the most from the technical support you receive with your SUSE Subscription, Premium Support, Academic Program, or Partner Program.

Open an Incident

Open an incident with SUSE Technical Support, manage your subscriptions, download patches, or manage user access.