Sounds like you're hitting a known issue that was fixed a while back (although
might not be fixed on the specific version you're running). Can you try
creating a second subuser for the same user, see if that one works?
Yehuda
----- Original Message -----
> From: "alistair whittle" <alistair.whit...@barclays.com>
> To: ceph-users@lists.ceph.com
> Sent: Thursday, April 23, 2015 8:38:44 AM
> Subject: [ceph-users] Swift and Ceph
>
>
>
> All,
>
>
>
> I was hoping for some advice. I have recently built a Ceph cluster on RHEL
> 6.5 and have configured RGW. I want to test Swift API access, and as a
> result have created a user, swift subuser and swift keys as per the output
> below:
>
>
>
> 1. Create user
>
>
>
> radosgw-admin user create --uid="testuser1" --display-name="Test User1"
>
> { "user_id": "testuser1",
>
> "display_name": "Test User1",
>
> "email": "",
>
> "suspended": 0,
>
> "max_buckets": 1000,
>
> "auid": 0,
>
> "subusers": [],
>
> "keys": [
>
> { "user": "testuser1",
>
> "access_key": "MJBEZLJ7BYG8XODXT71V",
>
> "secret_key": "tGnsm8JeEgPGAy1MGCKSVVoSIEs8iWNUOgiJ981p"}],
>
> "swift_keys": [],
>
> "caps": [],
>
> "op_mask": "read, write, delete",
>
> "default_placement": "",
>
> "placement_tags": [],
>
> "bucket_quota": { "enabled": false,
>
> "max_size_kb": -1,
>
> "max_objects": -1},
>
> "user_quota": { "enabled": false,
>
> "max_size_kb": -1,
>
> "max_objects": -1},
>
> "temp_url_keys": []}
>
>
>
> 2. Create subuser.
>
>
>
> radosgw-admin subuser create --uid=testuser1 --subuser=testuser1:swift
> --access=full
>
> { "user_id": "testuser1",
>
> "display_name": "Test User1",
>
> "email": "",
>
> "suspended": 0,
>
> "max_buckets": 1000,
>
> "auid": 0,
>
> "subusers": [
>
> { "id": "testuser1:swift",
>
> "permissions": "full-control"}],
>
> "keys": [
>
> { "user": "testuser1:swift",
>
> "access_key": "HX9Q30EJWCZG825AT7B0",
>
> "secret_key": ""},
>
> { "user": "testuser1",
>
> "access_key": "MJBEZLJ7BYG8XODXT71V",
>
> "secret_key": "tGnsm8JeEgPGAy1MGCKSVVoSIEs8iWNUOgiJ981p"}],
>
> "swift_keys": [],
>
> "caps": [],
>
> "op_mask": "read, write, delete",
>
> "default_placement": "",
>
> "placement_tags": [],
>
> "bucket_quota": { "enabled": false,
>
> "max_size_kb": -1,
>
> "max_objects": -1},
>
> "user_quota": { "enabled": false,
>
> "max_size_kb": -1,
>
> "max_objects": -1},
>
> "temp_url_keys": []}
>
>
>
> 3. Create key
>
>
>
> radosgw-admin key create --subuser=testuser1:swift --key-type=swift
> --gen-secret
>
> { "user_id": "testuser1",
>
> "display_name": "Test User1",
>
> "email": "",
>
> "suspended": 0,
>
> "max_buckets": 1000,
>
> "auid": 0,
>
> "subusers": [
>
> { "id": "testuser1:swift",
>
> "permissions": "full-control"}],
>
> "keys": [
>
> { "user": "testuser1:swift",
>
> "access_key": "HX9Q30EJWCZG825AT7B0",
>
> "secret_key": ""},
>
> { "user": "testuser1",
>
> "access_key": "MJBEZLJ7BYG8XODXT71V",
>
> "secret_key": "tGnsm8JeEgPGAy1MGCKSVVoSIEs8iWNUOgiJ981p"}],
>
> "swift_keys": [
>
> { "user": "testuser1:swift",
>
> "secret_key": "KpQCfPLstJhSMsR9qUzY9WfA1ebO4x7VRXkr1KSf"}],
>
> "caps": [],
>
> "op_mask": "read, write, delete",
>
> "default_placement": "",
>
> "placement_tags": [],
>
> "bucket_quota": { "enabled": false,
>
> "max_size_kb": -1,
>
> "max_objects": -1},
>
> "user_quota": { "enabled": false,
>
> "max_size_kb": -1,
>
> "max_objects": -1},
>
> "temp_url_keys": []}
>
>
>
> When I try and do anything using the credentials above, I get “Account not
> found” errors as per the example below:
>
>
>
> swift -A https://<FQDN>/auth/1.0 -U testuser1:swift -K
> "KpQCfPLstJhSMsR9qUzY9WfA1ebO4x7VRXkr1KSf" list
>
>
>
> That’s the first thing.
>
>
>
> Secondly, when I follow the process above to create a second user
> “testuser2”, the user and subuser is created, however, when I try and
> generate a swift key for it, I get the following error:
>
>
>
> radosgw-admin key create --subuser=testuser2:swift --key-type=swift
> --gen-secret
>
> could not create key: unable to add access key, unable to store user info
>
> 2015-04-23 15:42:38.897090 7f38e157d820 0 WARNING: can't store user info,
> swift id () already mapped to another user (testuser2)
>
>
>
> This suggests there is something wrong with the users or the configuration of
> the gateway somewhere. Can someone provide some advice on what might be
> wrong, or where I can look to find out. I have gone through whatever log
> files I can and don’t see anything of any use at the moment.
>
>
>
> Any help appreciated.
>
>
>
> Thanks
>
>
>
> Alistair
>
>
> _______________________________________________
>
> This message is for information purposes only, it is not a recommendation,
> advice, offer or solicitation to buy or sell a product or service nor an
> official confirmation of any transaction. It is directed at persons who are
> professionals and is not intended for retail customer use. Intended for
> recipient only. This message is subject to the terms at:
> www.barclays.com/emaildisclaimer .
>
> For important disclosures, please see:
> www.barclays.com/salesandtradingdisclaimer regarding market commentary from
> Barclays Sales and/or Trading, who are active market participants; and in
> respect of Barclays Research, including disclosures relating to specific
> issuers, please see http://publicresearch.barclays.com .
>
> _______________________________________________
>
> _______________________________________________
> ceph-users mailing list
> ceph-users@lists.ceph.com
> http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
>
_______________________________________________
ceph-users mailing list
ceph-users@lists.ceph.com
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
