Hi,
So what am I doing wrong? As I read the docs
(http://ceph.com/docs/master/radosgw/adminops/) i need users=read which
I applied with the command,
radosgw-admin caps add --uid=derek --caps="users=read"
But when I try to access /admin/users I get the following in the
radosgw.log and a 403 to the client.
2013-08-29 09:26:02.616168 7f91f9bf5700 10 auth_hdr:
GET
Thu, 29 Aug 2013 13:26:02 GMT
/admin/user
2013-08-29 09:26:02.616238 7f91f9bf5700 15 calculated
digest=IwccyjKmG14WzrJeh731lf0tHjw=
2013-08-29 09:26:02.616244 7f91f9bf5700 15
auth_sign=IwccyjKmG14WzrJeh731lf0tHjw=
2013-08-29 09:26:02.616246 7f91f9bf5700 15 compare=0
2013-08-29 09:26:02.616249 7f91f9bf5700 2 req 1:0.004719::GET
/admin/user:get_user_info:reading permissions
2013-08-29 09:26:02.616252 7f91f9bf5700 2 req 1:0.004723::GET
/admin/user:get_user_info:verifying op mask
2013-08-29 09:26:02.616255 7f91f9bf5700 20 required_mask= 0 user.op_mask=7
2013-08-29 09:26:02.616257 7f91f9bf5700 2 req 1:0.004728::GET
/admin/user:get_user_info:verifying op permissions
2013-08-29 09:26:02.616262 7f91f9bf5700 2 req 1:0.004733::GET
/admin/user:get_user_info:verifying op params
2013-08-29 09:26:02.616264 7f91f9bf5700 2 req 1:0.004735::GET
/admin/user:get_user_info:executing
2013-08-29 09:26:02.616307 7f91f9bf5700 2 req 1:0.004778::GET
/admin/user:get_user_info:http status=403
2013-08-29 09:26:02.616362 7f91f9bf5700 1 ====== req done req=0x15a2bf0
http_status=403 ======
# radosgw-admin user info --uid=derek
{ "user_id": "derek",
"display_name": "Derek Yarnell",
"email": "",
"suspended": 0,
"max_buckets": 1000,
"auid": 0,
"subusers": [],
"keys": [
{ "user": "derek",
"access_key": "XXXXXXXXXX",
"secret_key": "XXXXXXXXXX"}],
"swift_keys": [],
"caps": [
{ "type": "users",
"perm": "read"}],
"op_mask": "read, write, delete",
"default_placement": "",
"placement_tags": []}
Thanks,
derek
--
---
Derek T. Yarnell
University of Maryland
Institute for Advanced Computer Studies
_______________________________________________
ceph-users mailing list
[email protected]
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
