Success! You nailed it. Thanks, Yehuda.

I can successfully use the second subuser.

Given this success, I also tried the following:

$ rados -p .users.swift get '' tmp
$ rados -p .users.swift put hive_cache:swift tmp
$ rados -p .users.swift rm ''
$ rados -p .users.swift ls
hive_cache:swift2
hive_cache:swift

So everything looked good, as far as I can tell, but I still can't
authenticate with the first subuser. (But at least the second one still
works.)

- David


On Wed, Jun 11, 2014 at 5:38 PM, Yehuda Sadeh <[email protected]> wrote:

>  (resending also to list)
> Right. So Basically the swift subuser wasn't created correctly. I created
> issue #8587. Can you try creating a second subuser, see if it's created
> correctly the second time?
>
>
> On Wed, Jun 11, 2014 at 2:03 PM, David Curtiss <[email protected]
> > wrote:
>
>> Hmm.... Using that method, the subuser object appears to be an empty
>> string.
>>
>> First, note that I skipped the "Create Pools" step:
>> http://ceph.com/docs/master/radosgw/config/#create-pools
>> because it says "If the user you created has permissions, the gateway
>> will create the pools automatically."
>>
>> And indeed, the .users.swift pool is there:
>>
>> $ rados lspools
>> data
>> metadata
>> rbd
>> .rgw.root
>> .rgw.control
>> .rgw
>> .rgw.gc
>> .users.uid
>> .users.email
>> .users
>> .users.swift
>>
>> But the only entry in that pool is an empty string.
>>
>> $ rados ls -p .users.swift
>> <blank line>
>>
>> And that is indeed a blank line (as opposed to 0 lines), because there is
>> 1 object in that pool:
>> $ rados df
>> pool name       category                 KB      objects       clones
>> degraded      unfound           rd        rd KB           wr        wr KB
>> ...
>> .users.swift    -                          1            1            0
>>          0           0            0            0            1            1
>>
>> For comparison, the 'df' line for the .users pool lists 2 objects, which
>> are as follows:
>>
>> $ rados ls -p .users
>> 4U5H60BMDL7OSI5ZBL8P
>> F7HZCI4SL12KVVSJ9UVZ
>>
>> - David
>>
>>
>> On Tue, Jun 10, 2014 at 11:49 PM, Yehuda Sadeh <[email protected]>
>> wrote:
>>
>>> Can you verify that the subuser object actually exist? Try doing:
>>>
>>> $ rados ls -p .users.swift
>>>
>>> (unless you have non default pools set)
>>>
>>> Yehuda
>>>
>>> On Tue, Jun 10, 2014 at 6:44 PM, David Curtiss
>>> <[email protected]> wrote:
>>> > No good. In fact, for some reason when I tried to load up my cluster
>>> VMs
>>> > today, I couldnt't get them to work (something to do with a pipe
>>> fault), so
>>> > I recreated my VMs nearly from scratch, to no avail.
>>> >
>>> > Here are the commands I used to create the user and subuser:
>>> > radosgw-admin user create --uid=hive_cache --display-name="Hive Cache"
>>> > [email protected]
>>> > radosgw-admin subuser create --uid=hive_cache
>>> --subuser=hive_cache:swift
>>> > --access=full
>>> > radosgw-admin key create --subuser=hive_cache:swift --key-type=swift
>>> > --secret=QFAMEDSJP5DEKJO0DDXY
>>> >
>>> > - David
>>> >
>>> >
>>> > On Mon, Jun 9, 2014 at 11:14 PM, Yehuda Sadeh <[email protected]>
>>> wrote:
>>> >>
>>> >> It seems that the subuser object was not created for some reason. Can
>>> >> you try recreating it?
>>> >>
>>> >> Yehuda
>>> >>
>>> >> On Sun, Jun 8, 2014 at 5:50 PM, David Curtiss
>>> >> <[email protected]> wrote:
>>> >> > Here's the log: http://pastebin.com/bRt9kw9C
>>> >> >
>>> >> > Thanks,
>>> >> > David
>>> >> >
>>> >> >
>>> >> > On Fri, Jun 6, 2014 at 10:58 PM, Yehuda Sadeh <[email protected]>
>>> >> > wrote:
>>> >> >>
>>> >> >> On Wed, Jun 4, 2014 at 12:00 PM, David Curtiss
>>> >> >> <[email protected]> wrote:
>>> >> >> > Over the last two days, I set up ceph on a set of ubuntu 12.04
>>> VMs
>>> >> >> > (my
>>> >> >> > first
>>> >> >> > time working with ceph), and it seems to be working fine (I have
>>> >> >> > HEALTH_OK,
>>> >> >> > and can create a test document via the rados commandline tool),
>>> but I
>>> >> >> > can't
>>> >> >> > authenticate with the swift API.
>>> >> >> >
>>> >> >> > I followed the quickstart guides to get ceph and radosgw
>>> installed.
>>> >> >> > (Listed
>>> >> >> > here, if you want to check my work: http://pastebin.com/nfPWCn9P
>>> )
>>> >> >> >
>>> >> >> > Visiting the root of the web server shows the
>>> ListAllMyBucketsResult
>>> >> >> > XML, as
>>> >> >> > expected, but trying to authenticate always gives me "403
>>> Forbidden"
>>> >> >> > errors.
>>> >> >> >
>>> >> >> > Here's the output of "radosgw-admin user info --uid=hive_cache":
>>> >> >> > http://pastebin.com/vwwbyd4c
>>> >> >> > And here's my curl invocation: http://pastebin.com/EfQ8nw8a
>>> >> >> >
>>> >> >> > Any ideas on what might be wrong?
>>> >> >> >
>>> >> >>
>>> >> >> Not sure. Can you try reproducing it with 'debug rgw = 20' and
>>> 'debug
>>> >> >> ms = 1' on rgw and provide the log?
>>> >> >>
>>> >> >> Thanks,
>>> >> >> Yehuda
>>> >> >
>>> >> >
>>> >
>>> >
>>>
>>
>>
>
_______________________________________________
ceph-users mailing list
[email protected]
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com

Reply via email to