How to give users access to beegfs-df and beegfs-ctl --getquota in 7.3.2?

[Vinci Chow]

The documentation of 7.3.2 highly recommend enabling connection-based authentication. 

The example instructions sets connauthfile to be readable only by the root user: https://doc.beegfs.io/latest/advanced_topics/authentication.html#connectionbasedauth

This would, however, forbid user access to beegfs-df and beegfs-ctl --getquota due to permission error. Is the solution setting connauthfile's permission to 644?

[Bruno Travouillon]

You can add the setuid bit on the file with chmod u+s /usr/sbin/beegfs-ctl.

$ ls -lH /usr/sbin/beegfs-ctl

-rwsr-xr-x 1 root root 2537840 Mar 15  2022 /usr/sbin/beegfs-ctl

This is relatively safe due to https://git.beegfs.io/pub/v7/-/blob/7.3.3/ctl/source/app/App.cpp?ref_type=tags#L81-83 and https://git.beegfs.io/pub/v7/-/blob/7.3.3/common/source/common/app/config/AbstractConfig.cpp?ref_type=tags#L326-L340

Regards,

Bruno