All of lore.kernel.org
 help / color / mirror / Atom feed
From: Francois Deppierraz <francois@ctrlaltdel.ch>
To: Ceph Development <ceph-devel@vger.kernel.org>
Subject: [radosgw-admin] modify bucker owner
Date: Mon, 02 Jun 2014 11:07:16 +0200	[thread overview]
Message-ID: <538C3EC4.8000604@ctrlaltdel.ch> (raw)

Hi,

I'm trying to modify the owner of an existing bucket. The original user
(userA) was manually created with radosgw-admin user create a few
releases ago (dumpling I guess). The new user
(a2176a80eeac47a58c3d773eaebf6659) is defined in the Openstack Keystone
service.

# ceph -v
ceph version 0.72.2 (a913ded2ff138aefb8cb84d347d72164099cfd60)
# radosgw-admin bucket stats --bucket test-permissions3
{ "bucket": "test-permissions3",
  "pool": ".rgw.buckets",
  "index_pool": ".rgw.buckets",
  "id": "default.37768360.136",
  "marker": "default.37768360.136",
  "owner": "userA",
  "ver": 3,
  "master_ver": 0,
  "mtime": 1401699197,
  "max_marker": "",
  "usage": { "rgw.main": { "size_kb": 1,
          "size_kb_actual": 4,
          "num_objects": 1}},
  "bucket_quota": { "enabled": false,
      "max_size_kb": -1,
      "max_objects": -1}}
# radosgw-admin bucket link --bucket test-permissions3 --uid
a2176a80eeac47a58c3d773eaebf6659
# radosgw-admin bucket stats --bucket test-permissions3
{ "bucket": "test-permissions3",
  "pool": ".rgw.buckets",
  "index_pool": ".rgw.buckets",
  "id": "default.37768360.136",
  "marker": "default.37768360.136",
  "owner": "a2176a80eeac47a58c3d773eaebf6659",
  "ver": 3,
  "master_ver": 0,
  "mtime": 1401699387,
  "max_marker": "",
  "usage": { "rgw.main": { "size_kb": 1,
          "size_kb_actual": 4,
          "num_objects": 1}},
  "bucket_quota": { "enabled": false,
      "max_size_kb": -1,
      "max_objects": -1}}


Looks like the bucket owner was correctly changed, however access to the
bucket through the swift API with the new user fails.

$ swift list
test-permissions3
$ swift list test-permissions3
Container GET failed:
https://s3.company.com/swift/v1/test-permissions3?format=json 401
Authorization Required   {"Code":"AccessDenied"}
$

Trying to rollback to the previous state also fails.

# radosgw-admin bucket link --bucket test-permissions3 --uid userA
failure: (22) Invalid argument
2014-06-02 11:02:21.216739 7fb0b0392780  0 bucket entry point user
mismatch, can't unlink bucket: a2176a80eeac47a58c3d773eaebf6659 != userA
#

Fortunately, access to the bucket with the old user still works, even
though it's no longer listed as owner of the bucket according to
radosgw-admin.

Am I doing this wrong or is there a bug somewhere?

Thanks for your help!

François
--
To unsubscribe from this list: send the line "unsubscribe ceph-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

                 reply	other threads:[~2014-06-02  9:16 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=538C3EC4.8000604@ctrlaltdel.ch \
    --to=francois@ctrlaltdel.ch \
    --cc=ceph-devel@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.