Re: [ceph-users] Apply bucket policy to bucket for LDAP user: what is the correct identifier for principal

2018-10-19 Thread Ha Son Hai
Hello, I found that the metadata of ldap user and normal radosgw user different in the "type". Can it be the cause that the bucket policy does not work? # Normal radosgw user { "user_id": "ceph-dashboard", "display_name": "Ceph Dashboard", "email": "", "suspended": 0,

Re: [ceph-users] Apply bucket policy to bucket for LDAP user: what is the correct identifier for principal

2018-10-15 Thread Ha Son Hai
Hi Matt and Adam, Thanks a lot for your reply. Attached are logs that that are generated when I shared the bucket from a rgw user (ceph-dashboard) to a ldap user (sonhaiha) and vice versa. [sonhaiha@DEFR500 ~]$ s3cmd -c .s3cfg-cephdb info s3://shared-bucket s3://shared-bucket/ (bucket):

Re: [ceph-users] Apply bucket policy to bucket for LDAP user: what is the correct identifier for principal

2018-10-11 Thread Matt Benjamin
right, the user can be the dn component or something else projected from the entry, details in the docs Matt On Thu, Oct 11, 2018 at 1:26 PM, Adam C. Emerson wrote: > Ha Son Hai wrote: >> Hello everyone, >> I try to apply the bucket policy to my bucket for LDAP user but it doesn't >> work. >>

Re: [ceph-users] Apply bucket policy to bucket for LDAP user: what is the correct identifier for principal

2018-10-11 Thread Adam C. Emerson
Ha Son Hai wrote: > Hello everyone, > I try to apply the bucket policy to my bucket for LDAP user but it doesn't > work. > For user created by radosgw-admin, the policy works fine. > > { > > "Version": "2012-10-17", > > "Statement": [{ > > "Effect": "Allow", > > "Principal": {"AWS":

[ceph-users] Apply bucket policy to bucket for LDAP user: what is the correct identifier for principal

2018-10-11 Thread Ha Son Hai
Hello everyone, I try to apply the bucket policy to my bucket for LDAP user but it doesn't work. For user created by radosgw-admin, the policy works fine. { "Version": "2012-10-17", "Statement": [{ "Effect": "Allow", "Principal": {"AWS": ["arn:aws:iam:::user/radosgw-user"]},