From mboxrd@z Thu Jan 1 00:00:00 1970 From: Shailesh Tyagi Subject: radosgw / fail to authorized request Date: Sat, 12 Jan 2013 02:01:59 +0530 Message-ID: <50F076BF.2020800@novanet.net> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Return-path: Received: from na3sys010aog103.obsmtp.com ([74.125.245.74]:55759 "HELO na3sys010aog103.obsmtp.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with SMTP id S1753347Ab3AKUio (ORCPT ); Fri, 11 Jan 2013 15:38:44 -0500 Received: by mail-pa0-f69.google.com with SMTP id rl6so2327768pac.4 for ; Fri, 11 Jan 2013 12:38:43 -0800 (PST) Sender: ceph-devel-owner@vger.kernel.org List-ID: To: ceph-devel@vger.kernel.org Hello, I have configured radosgw based on the doc available at ceph.com. getting "failed to authorized request" while trying to create bucket using s3 api. ceph.conf have "auth supported = none" will appreciate some direction. Thanks. ST Here is the radosgw log. 013-01-11 15:15:35.095862 7f0ef7fff700 1 -- 216.128.86.29:0/1025289 --> 216.128.86.26:6801/11539 -- ping v1 -- ?+0 0x7f0e9007fc00 con 0x7f0ef0000be0 2013-01-11 15:15:38.534022 7f0f14411780 20 enqueued request req=0x2df81e0 2013-01-11 15:15:38.534064 7f0f14411780 20 RGWWQ: 2013-01-11 15:15:38.534068 7f0f14411780 20 req: 0x2df81e0 2013-01-11 15:15:38.534140 7f0f14411780 10 allocated request req=0x2e0e9c0 2013-01-11 15:15:38.534157 7f0ef54f7700 20 dequeued request req=0x2df81e0 2013-01-11 15:15:38.534183 7f0ef54f7700 20 RGWWQ: empty 2013-01-11 15:15:38.534191 7f0ef54f7700 1 ====== starting new request req=0x2df81e0 ===== 2013-01-11 15:15:38.534258 7f0ef54f7700 2 req 16:0.000068::::initializing 2013-01-11 15:15:38.534288 7f0ef54f7700 10 meta>> HTTP_X_AMZ_ACL=private 2013-01-11 15:15:38.534300 7f0ef54f7700 10 x>> x-amz-acl:private 2013-01-11 15:15:38.534323 7f0ef54f7700 10 s->object= s->bucket=test 2013-01-11 15:15:38.534330 7f0ef54f7700 20 FCGI_ROLE=RESPONDER 2013-01-11 15:15:38.534332 7f0ef54f7700 20 SCRIPT_URL=/test/ 2013-01-11 15:15:38.534333 7f0ef54f7700 20 SCRIPT_URI=http://ceph-29.novanet.net/test/ 2013-01-11 15:15:38.534334 7f0ef54f7700 20 HTTP_AUTHORIZATION=AWS 2LMOZT925CM56WG0G78M:eWXTBULc9bTxe041Vdqli9vW1sw= 2013-01-11 15:15:38.534335 7f0ef54f7700 20 HTTP_USER_AGENT=aws-sdk-php/1.3.3 PHP/5.3.6 Linux/2.6.32-5-amd64 Arch/x86_64 SAPI/apache2handler Integer/9223372036854775807 Build/20110510205648 simplexml/0.1 json/1.2.1 pcre/8.11 spl/0.2 curl/7.21.3 openssl/0.9.8o apc/3.1.11 pdo/1.0.4dev pdo_sqlite/1.0.1 sqlite/2.0-dev sqlite3/0.7-dev zlib/1.1 2013-01-11 15:15:38.534340 7f0ef54f7700 20 HTTP_HOST=ceph-29.novanet.net 2013-01-11 15:15:38.534342 7f0ef54f7700 20 HTTP_ACCEPT=*/* 2013-01-11 15:15:38.534343 7f0ef54f7700 20 HTTP_ACCEPT_ENCODING=deflate, gzip 2013-01-11 15:15:38.534344 7f0ef54f7700 20 HTTP_REFERER=http://ceph-29.novanet.net/test/ 2013-01-11 15:15:38.534345 7f0ef54f7700 20 HTTP_EXPECT=100-continue 2013-01-11 15:15:38.534346 7f0ef54f7700 20 CONTENT_LENGTH=0 2013-01-11 15:15:38.534347 7f0ef54f7700 20 HTTP_CONTENT_MD5=1B2M2Y8AsgTpgAmY7PhCfg== 2013-01-11 15:15:38.534348 7f0ef54f7700 20 CONTENT_TYPE=application/xml 2013-01-11 15:15:38.534349 7f0ef54f7700 20 HTTP_DATE=Fri, 11 Jan 2013 19:18:50 GMT 2013-01-11 15:15:38.534350 7f0ef54f7700 20 HTTP_X_AMZ_ACL=private 2013-01-11 15:15:38.534351 7f0ef54f7700 20 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games 2013-01-11 15:15:38.534352 7f0ef54f7700 20 SERVER_SIGNATURE= 2013-01-11 15:15:38.534353 7f0ef54f7700 20 SERVER_SOFTWARE=Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.1 mod_fastcgi/mod_fastcgi-SNAP-0910052141 2013-01-11 15:15:38.534355 7f0ef54f7700 20 SERVER_NAME=ceph-29.novanet.net 2013-01-11 15:15:38.534356 7f0ef54f7700 20 SERVER_ADDR=216.128.86.29 2013-01-11 15:15:38.534357 7f0ef54f7700 20 SERVER_PORT=80 2013-01-11 15:15:38.534358 7f0ef54f7700 20 REMOTE_ADDR=203.153.53.187 2013-01-11 15:15:38.534359 7f0ef54f7700 20 DOCUMENT_ROOT=/var/www 2013-01-11 15:15:38.534360 7f0ef54f7700 20 SERVER_ADMIN=webmaster@novanet.net 2013-01-11 15:15:38.534361 7f0ef54f7700 20 SCRIPT_FILENAME=/var/www/s3gw.fcgi 2013-01-11 15:15:38.534363 7f0ef54f7700 20 REMOTE_PORT=47829 2013-01-11 15:15:38.534364 7f0ef54f7700 20 GATEWAY_INTERFACE=CGI/1.1 2013-01-11 15:15:38.534365 7f0ef54f7700 20 SERVER_PROTOCOL=HTTP/1.1 2013-01-11 15:15:38.534366 7f0ef54f7700 20 REQUEST_METHOD=PUT 2013-01-11 15:15:38.534367 7f0ef54f7700 20 QUERY_STRING=page=test¶ms=/ 2013-01-11 15:15:38.534368 7f0ef54f7700 20 REQUEST_URI=/test/ 2013-01-11 15:15:38.534369 7f0ef54f7700 20 SCRIPT_NAME=/test/ 2013-01-11 15:15:38.534372 7f0ef54f7700 2 req 16:0.000182:s3:PUT /test/::getting op 2013-01-11 15:15:38.534378 7f0ef54f7700 2 req 16:0.000188:s3:PUT /test/:create_bucket:authorizing 2013-01-11 15:15:38.534406 7f0ef54f7700 20 get_obj_state: rctx=0x7f0e9c005f80 obj=.users:2LMOZT925CM56WG0G78M state=0x7f0e9c00bc08 s->prefetch_data=0 2013-01-11 15:15:38.534419 7f0ef54f7700 10 moving .users+2LMOZT925CM56WG0G78M to cache LRU end 2013-01-11 15:15:38.534423 7f0ef54f7700 10 cache get: name=.users+2LMOZT925CM56WG0G78M : hit 2013-01-11 15:15:38.534442 7f0ef54f7700 20 get_obj_state: s->obj_tag was set empty 2013-01-11 15:15:38.534451 7f0ef54f7700 10 moving .users+2LMOZT925CM56WG0G78M to cache LRU end 2013-01-11 15:15:38.534453 7f0ef54f7700 10 cache get: name=.users+2LMOZT925CM56WG0G78M : hit 2013-01-11 15:15:38.534517 7f0ef54f7700 10 get_canon_resource(): dest=/test/ 2013-01-11 15:15:38.534521 7f0ef54f7700 10 auth_hdr: PUT 1B2M2Y8AsgTpgAmY7PhCfg== application/xml Fri, 11 Jan 2013 19:18:50 GMT x-amz-acl:private /test/ 2013-01-11 15:15:38.534523 7f0ef54f7700 10 req_sec=1357931930 now=1357935338; now - RGW_AUTH_GRACE_MINS=1357934438; now + RGW_AUTH_GRACE_MINS=1357936238 2013-01-11 15:15:38.534527 7f0ef54f7700 0 NOTICE: request time skew too big now=2013-01-11 15:15:38.000000 req_time=2013-01-11 14:18:50.000000 2013-01-11 15:15:38.534537 7f0ef54f7700 10 failed to authorize request 2013-01-11 15:15:38.534571 7f0ef54f7700 2 req 16:0.000381:s3:PUT /test/:create_bucket:http status=403 2013-01-11 15:15:38.534705 7f0ef54f7700 1 ====== req done req=0x2df81e0 http_status=403 ======