I meet same problem. maybe this is a bug
http://tracker.ceph.com/issues/9002
but i stiell can not access radosgw
root@ceph-radosgw:~# radosgw-admin user create --subuser=testuser:swf0001
--display-name="Test User One" --key-type=swift --access=full
{ "user_id": "testuser",
"display_name": "Test User One",
"email": "",
"suspended": 0,
"max_buckets": 1000,
"auid": 0,
"subusers": [],
"keys": [],
"swift_keys": [
{ "user": "testuser:swf0001",
"secret_key": "W\/zZ8T09VPFoPKxnVAJocsmNALoPxEYPmjOwytCj"}],
"caps": [],
"op_mask": "read, write, delete",
"default_placement": "",
"placement_tags": [],
"bucket_quota": { "enabled": false,
"max_size_kb": -1,
"max_objects": -1},
"user_quota": { "enabled": false,
"max_size_kb": -1,
"max_objects": -1},
"temp_url_keys": []}
root@ceph-radosgw:~# curl -v -i http://192.168.123.191/auth -X GET -H
"X-Auth-User:testuser:swf0001" -H
"X-Auth-Key:W/zZ8T09VPFoPKxnVAJocsmNALoPxEYPmjOwytCj"
* About to connect() to 192.168.123.191 port 80 (#0)
* Trying 192.168.123.191...
* Connected to 192.168.123.191 (192.168.123.191) port 80 (#0)
> GET /auth HTTP/1.1
> User-Agent: curl/7.29.0
> Host: 192.168.123.191
> Accept: */*
> X-Auth-User:testuser:swf0001
> X-Auth-Key:W/zZ8T09VPFoPKxnVAJocsmNALoPxEYPmjOwytCj
>
< HTTP/1.1 403 Forbidden
HTTP/1.1 403 Forbidden
< Date: Tue, 12 Aug 2014 03:16:41 GMT
Date: Tue, 12 Aug 2014 03:16:41 GMT
< Server: Apache/2.2.22 (Debian)
Server: Apache/2.2.22 (Debian)
< Accept-Ranges: bytes
Accept-Ranges: bytes
< Content-Length: 23
Content-Length: 23
< Content-Type: application/json
Content-Type: application/json
<
* Connection #0 to host 192.168.123.191 left intact
{"Code":"AccessDenied"}
2014-05-21 3:14 GMT+07:00 Simon Weald <[email protected]>:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hello
>
> I've been experimenting with radosgw and I've had no issues with the
> S3 interface, however I cannot get a subuser created for use with the
> Swift api.
>
> First I created a user:
>
> root@ceph1:~# radosgw-admin user create --uid=shw
> - --display-name="Simon Weald"
> { "user_id": "shw",
> "display_name": "Simon Weald",
> "email": "",
> "suspended": 0,
> "max_buckets": 1000,
> "auid": 0,
> "subusers": [],
> "keys": [
> { "user": "shw",
> "access_key": "1WFY4I8I152WX8P74NZ7",
> "secret_key": "AkYBun7GubMaJq+IV4\/Rd904gkThrTVTLnhDATNm"}],
> "swift_keys": [],
> "caps": [],
> "op_mask": "read, write, delete",
> "default_placement": "",
> "placement_tags": [],
> "bucket_quota": { "enabled": false,
> "max_size_kb": -1,
> "max_objects": -1},
> "user_quota": { "enabled": false,
> "max_size_kb": -1,
> "max_objects": -1},
> "temp_url_keys": []}
>
> Then I created a subuser:
>
> root@ceph1:~# radosgw-admin subuser create --uid=shw
> - --subuser=shw:swift --access=full
> { "user_id": "shw",
> "display_name": "Simon Weald",
> "email": "",
> "suspended": 0,
> "max_buckets": 1000,
> "auid": 0,
> "subusers": [
> { "id": "shw:swift",
> "permissions": "full-control"}],
> "keys": [
> { "user": "shw",
> "access_key": "1WFY4I8I152WX8P74NZ7",
> "secret_key": "AkYBun7GubMaJq+IV4\/Rd904gkThrTVTLnhDATNm"},
> { "user": "shw:swift",
> "access_key": "QJDYHDW1E63ZU0B75Z3P",
> "secret_key": ""}],
> "swift_keys": [],
> "caps": [],
> "op_mask": "read, write, delete",
> "default_placement": "",
> "placement_tags": [],
> "bucket_quota": { "enabled": false,
> "max_size_kb": -1,
> "max_objects": -1},
> "user_quota": { "enabled": false,
> "max_size_kb": -1,
> "max_objects": -1},
> "temp_url_keys": []}
>
> The issue comes when trying to create a secret key for the subuser:
>
> root@ceph1:~# radosgw-admin key create --subuser=shw:swift
> - --key-type=swift --gen-secret
> 2014-05-20 20:13:29.460167 7f579bed5700 0 -- :/1004375 >>
> 10.16.116.14:6789/0 pipe(0x1f94240 sd=3 :0 s=1 pgs=0 cs=0t
> could not create key: unable to add access key, unable to store user
> info2014-05-20 20:13:32.530032 7f57a5e7a780 0 )
>
>
> I'm running Firefly on Wheezy.
>
> Thanks!
>
> - --
>
> PGP key - http://www.simonweald.com/simonweald.asc
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.14 (GNU/Linux)
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
>
> iQEcBAEBAgAGBQJTe7e8AAoJEJiOmFh0er6IzJoH/RKeXDCFKiR108zjpnwmd+O2
> b0+u6N3Y+4KoLRRZbq7aJOSxH42lgFuGwwhkIZxXWC/xIHuxwHlwn4zqoBrTtfG3
> BAoOZkFdeEyoVfB3/xnAY8PXQPOCbTq6E2qma3dTxDS30h27ru09uGrWPuSfZV18
> g/cPGuOXpEp+bXHaRVgKBKp98sO+679V3uWrqszgRDV/xkc4h0Z9qicWJCIT+y4u
> niYeRL9zfBg/zQG5urx8GCkmkpVdvQ/L0M29zFpoDrlMORHtBy5Fs/3Wh9zFacNB
> u7KY44JbMrYPnbegbWK+5d5D2nO84d63k498KFkk3ExlFJJ8MC3JmKFlhWEc1K4=
> =Q/Yk
> -----END PGP SIGNATURE-----
> _______________________________________________
> ceph-users mailing list
> [email protected]
> http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
>
_______________________________________________
ceph-users mailing list
[email protected]
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
