Project

General

Profile

Bug #16439

Can not change access for containers

Added by john mathew almost 8 years ago. Updated almost 8 years ago.

Status:
Duplicate
Priority:
Immediate
Assignee:
-
Target version:
-
% Done:

0%

Source:
other
Tags:
Backport:
Regression:
No
Severity:
2 - major
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):

Description

I am using radosgw as object storage in openstack liberty. I am using ceph jewel. Currently I can create public and private containers. But cannot change the access of containers ie. cannot change a public container to private and vice versa. There is pop-up. "Success: Successfully updated container access to public." But access is not changing. I tried through backend, but no luck Couldn't find any errors in logs. I tried with ceph-infernalis, but couldn't recreate this with infernalis.
Everything worked with infernalis.

====

COMMAND

curl -X POST -i -H "X-Auth-Token:xxxxxxxxx" -H "X-Container-Read: *" -L "http://xxxxxxxxxxx:7480/swift/v1/pub5"

2016-06-23 03:17:11.822539 7f0ae2ffd700 2 RGWDataChangesLog::ChangesRenewThread: start
2016-06-23 03:17:33.822711 7f0ae2ffd700 2 RGWDataChangesLog::ChangesRenewThread: start
2016-06-23 03:17:48.028376 7f09077fe700 20 RGWEnv::set(): HTTP_USER_AGENT: curl/7.35.0
2016-06-23 03:17:48.028397 7f09077fe700 20 RGWEnv::set(): HTTP_HOST: 10.10.20.9:7480
2016-06-23 03:17:48.028400 7f09077fe700 20 RGWEnv::set(): HTTP_ACCEPT: /*
2016-06-23 03:17:48.028403 7f09077fe700 20 RGWEnv::set(): HTTP_X_AUTH_TOKEN: 5b83a5faf86e4df3baa087049e8a0b9a
2016-06-23 03:17:48.028410 7f09077fe700 20 RGWEnv::set(): HTTP_X_CONTAINER_READ: *
2016-06-23 03:17:48.028412 7f09077fe700 20 RGWEnv::set(): REQUEST_METHOD: POST
2016-06-23 03:17:48.028414 7f09077fe700 20 RGWEnv::set(): REQUEST_URI: /swift/v1/pub5
2016-06-23 03:17:48.028416 7f09077fe700 20 RGWEnv::set(): QUERY_STRING:
2016-06-23 03:17:48.028422 7f09077fe700 20 RGWEnv::set(): REMOTE_USER:
2016-06-23 03:17:48.028424 7f09077fe700 20 RGWEnv::set(): SCRIPT_URI: /swift/v1/pub5
2016-06-23 03:17:48.028427 7f09077fe700 20 RGWEnv::set(): SERVER_PORT: 7480
2016-06-23 03:17:48.028429 7f09077fe700 20 HTTP_ACCEPT=
/*
2016-06-23 03:17:48.028430 7f09077fe700 20 HTTP_HOST=10.10.20.9:7480
2016-06-23 03:17:48.028431 7f09077fe700 20 HTTP_USER_AGENT=curl/7.35.0
2016-06-23 03:17:48.028432 7f09077fe700 20 HTTP_X_AUTH_TOKEN=5b83a5faf86e4df3baa087049e8a0b9a
2016-06-23 03:17:48.028434 7f09077fe700 20 HTTP_X_CONTAINER_READ=*
2016-06-23 03:17:48.028435 7f09077fe700 20 QUERY_STRING=
2016-06-23 03:17:48.028436 7f09077fe700 20 REMOTE_USER=
2016-06-23 03:17:48.028437 7f09077fe700 20 REQUEST_METHOD=POST
2016-06-23 03:17:48.028438 7f09077fe700 20 REQUEST_URI=/swift/v1/pub5
2016-06-23 03:17:48.028439 7f09077fe700 20 SCRIPT_URI=/swift/v1/pub5
2016-06-23 03:17:48.028439 7f09077fe700 20 SERVER_PORT=7480
2016-06-23 03:17:48.028442 7f09077fe700 1 ====== starting new request req=0x7f09077f87d0 =====
2016-06-23 03:17:48.028470 7f09077fe700 2 req 63:0.000029::POST /swift/v1/pub5::initializing for trans_id = tx00000000000000000003f-00576b8d1c-16d30b-default
2016-06-23 03:17:48.028478 7f09077fe700 10 host=10.10.20.9
2016-06-23 03:17:48.028482 7f09077fe700 20 subdomain= domain= in_hosted_domain=0 in_hosted_domain_s3website=0
2016-06-23 03:17:48.028494 7f09077fe700 10 meta>> HTTP_X_CONTAINER_READ
2016-06-23 03:17:48.028501 7f09077fe700 10 x>> x-amz-read:*
2016-06-23 03:17:48.028520 7f09077fe700 10 ver=v1 first=pub5 req=
2016-06-23 03:17:48.028527 7f09077fe700 10 handler=28RGWHandler_REST_Bucket_SWIFT
2016-06-23 03:17:48.028530 7f09077fe700 2 req 63:0.000089:swift:POST /swift/v1/pub5::getting op 4
2016-06-23 03:17:48.028535 7f09077fe700 10 op=35RGWPutMetadataBucket_ObjStore_SWIFT
2016-06-23 03:17:48.028537 7f09077fe700 2 req 63:0.000095:swift:POST /swift/v1/pub5:put_bucket_metadata:authorizing
2016-06-23 03:17:48.028544 7f09077fe700 20 token_id=5b83a5faf86e4df3baa087049e8a0b9a
2016-06-23 03:17:48.028553 7f09077fe700 20 cached token.project.id=1c1ae7b02eaa4610bd46d04ddc0f3c00
2016-06-23 03:17:48.028559 7f09077fe700 20 updating user=1c1ae7b02eaa4610bd46d04ddc0f3c00
2016-06-23 03:17:48.028577 7f09077fe700 20 get_system_obj_state: rctx=0x7f09077f71d0 obj=default.rgw.users.uid:1c1ae7b02eaa4610bd46d04ddc0f3c00$1c1ae7b02eaa4610bd46d04ddc0f3c00 state=0x7f08f800c318 s->prefetch_data=0
2016-06-23 03:17:48.028589 7f09077fe700 10 cache get: name=default.rgw.users.uid+1c1ae7b02eaa4610bd46d04ddc0f3c00$1c1ae7b02eaa4610bd46d04ddc0f3c00 : type miss (requested=6, cached=0)
2016-06-23 03:17:48.029626 7f09077fe700 10 cache put: name=default.rgw.users.uid+1c1ae7b02eaa4610bd46d04ddc0f3c00$1c1ae7b02eaa4610bd46d04ddc0f3c00 info.flags=0
2016-06-23 03:17:48.029638 7f09077fe700 10 moving default.rgw.users.uid+1c1ae7b02eaa4610bd46d04ddc0f3c00$1c1ae7b02eaa4610bd46d04ddc0f3c00 to cache LRU end
2016-06-23 03:17:48.029653 7f09077fe700 20 get_system_obj_state: rctx=0x7f09077f71d0 obj=default.rgw.users.uid:1c1ae7b02eaa4610bd46d04ddc0f3c00 state=0x7f08f800c188 s->prefetch_data=0
2016-06-23 03:17:48.029661 7f09077fe700 10 cache get: name=default.rgw.users.uid+1c1ae7b02eaa4610bd46d04ddc0f3c00 : hit (requested=6, cached=7)
2016-06-23 03:17:48.029670 7f09077fe700 20 get_system_obj_state: s->obj_tag was set empty
2016-06-23 03:17:48.029681 7f09077fe700 10 cache get: name=default.rgw.users.uid+1c1ae7b02eaa4610bd46d04ddc0f3c00 : hit (requested=1, cached=7)
2016-06-23 03:17:48.029705 7f09077fe700 2 req 63:0.001263:swift:POST /swift/v1/pub5:put_bucket_metadata:normalizing buckets and tenants
2016-06-23 03:17:48.029711 7f09077fe700 10 s->object=<NULL> s->bucket=pub5
2016-06-23 03:17:48.029715 7f09077fe700 2 req 63:0.001273:swift:POST /swift/v1/pub5:put_bucket_metadata:init permissions
2016-06-23 03:17:48.029745 7f09077fe700 15 decode_policy Read AccessControlPolicy<AccessControlPolicy xmlns="http://s3.amazonaws.com/doc/2006-03-01/"><Owner><ID>1c1ae7b02eaa4610bd46d04ddc0f3c00</ID><DisplayName>admin</DisplayName></Owner><AccessControlList><Grant><Grantee xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="CanonicalUser"><ID>1c1ae7b02eaa4610bd46d04ddc0f3c00</ID><DisplayName>admin</DisplayName></Grantee><Permission>FULL_CONTROL</Permission></Grant></AccessControlList></AccessControlPolicy>
2016-06-23 03:17:48.029758 7f09077fe700 2 req 63:0.001316:swift:POST /swift/v1/pub5:put_bucket_metadata:recalculating target
2016-06-23 03:17:48.029762 7f09077fe700 2 req 63:0.001320:swift:POST /swift/v1/pub5:put_bucket_metadata:reading permissions
2016-06-23 03:17:48.029766 7f09077fe700 2 req 63:0.001324:swift:POST /swift/v1/pub5:put_bucket_metadata:init op
2016-06-23 03:17:48.029769 7f09077fe700 2 req 63:0.001328:swift:POST /swift/v1/pub5:put_bucket_metadata:verifying op mask
2016-06-23 03:17:48.029772 7f09077fe700 20 required_mask= 2 user.op_mask=7
2016-06-23 03:17:48.029774 7f09077fe700 2 req 63:0.001332:swift:POST /swift/v1/pub5:put_bucket_metadata:verifying op permissions
2016-06-23 03:17:48.029778 7f09077fe700 5 Searching permissions for uid=1c1ae7b02eaa4610bd46d04ddc0f3c00 mask=50
2016-06-23 03:17:48.029780 7f09077fe700 5 Found permission: 15
2016-06-23 03:17:48.029783 7f09077fe700 5 Searching permissions for group=1 mask=50
2016-06-23 03:17:48.029784 7f09077fe700 5 Permissions for group not found
2016-06-23 03:17:48.029786 7f09077fe700 5 Searching permissions for group=2 mask=50
2016-06-23 03:17:48.029788 7f09077fe700 5 Permissions for group not found
2016-06-23 03:17:48.029789 7f09077fe700 5 Getting permissions id=1c1ae7b02eaa4610bd46d04ddc0f3c00 owner=1c1ae7b02eaa4610bd46d04ddc0f3c00 perm=2
2016-06-23 03:17:48.029790 7f09077fe700 10 uid=1c1ae7b02eaa4610bd46d04ddc0f3c00 requested perm (type)=2, policy perm=2, user_perm_mask=2, acl perm=2
2016-06-23 03:17:48.029792 7f09077fe700 2 req 63:0.001351:swift:POST /swift/v1/pub5:put_bucket_metadata:verifying op params
2016-06-23 03:17:48.029795 7f09077fe700 2 req 63:0.001353:swift:POST /swift/v1/pub5:put_bucket_metadata:pre-executing
2016-06-23 03:17:48.029798 7f09077fe700 2 req 63:0.001356:swift:POST /swift/v1/pub5:put_bucket_metadata:executing
2016-06-23 03:17:48.029818 7f09077fe700 20 get_system_obj_state: rctx=0x7f09077f7510 obj=default.rgw.users.uid:* state=0x7f08f800ec58 s->prefetch_data=0
2016-06-23 03:17:48.029825 7f09077fe700 10 cache get: name=default.rgw.users.uid+* : type miss (requested=6, cached=0)
2016-06-23 03:17:48.030978 7f09077fe700 10 cache put: name=default.rgw.users.uid+* info.flags=0
2016-06-23 03:17:48.030984 7f09077fe700 10 moving default.rgw.users.uid+* to cache LRU end
2016-06-23 03:17:48.030989 7f09077fe700 10 grant user does not exist:*
2016-06-23 03:17:48.030998 7f09077fe700 10 x>> x-amz-read:*
2016-06-23 03:17:48.033822 7f09077fe700 10 cache put: name=default.rgw.meta+.meta:bucket.instance:pub5:4443cc88-2381-4fba-932d-7aff574748c6.1494154.1:_EUw9L56pCkxRSjxvFiwmfC1:8 info.flags=23
2016-06-23 03:17:48.033834 7f09077fe700 10 adding default.rgw.meta+.meta:bucket.instance:pub5:4443cc88-2381-4fba-932d-7aff574748c6.1494154.1:_EUw9L56pCkxRSjxvFiwmfC1:8 to cache LRU end
2016-06-23 03:17:48.033836 7f09077fe700 10 updating xattr: name=user.rgw.acl bl.length()=235
2016-06-23 03:17:48.033838 7f09077fe700 10 updating xattr: name=user.rgw.idtag bl.length()=0
2016-06-23 03:17:48.033838 7f09077fe700 10 updating xattr: name=user.rgw.manifest bl.length()=0
2016-06-23 03:17:48.033839 7f09077fe700 10 updating xattr: name=user.rgw.x-amz-read bl.length()=2
2016-06-23 03:17:48.033854 7f09077fe700 10 distributing notification oid=notify.3 bl.length()=1043
2016-06-23 03:17:48.035022 7f0ae37fe700 10 RGWWatcher::handle_notify() notify_id 2052994367603 cookie 93832456480208 notifier 1495819 bl.length()=1043
2016-06-23 03:17:48.035059 7f0ae37fe700 10 cache put: name=default.rgw.meta+.meta:bucket.instance:pub5:4443cc88-2381-4fba-932d-7aff574748c6.1494154.1:_EUw9L56pCkxRSjxvFiwmfC1:8 info.flags=23
2016-06-23 03:17:48.035068 7f0ae37fe700 10 moving default.rgw.meta+.meta:bucket.instance:pub5:4443cc88-2381-4fba-932d-7aff574748c6.1494154.1:_EUw9L56pCkxRSjxvFiwmfC1:8 to cache LRU end
2016-06-23 03:17:48.035077 7f0ae37fe700 10 updating xattr: name=user.rgw.acl bl.length()=235
2016-06-23 03:17:48.035083 7f0ae37fe700 10 updating xattr: name=user.rgw.idtag bl.length()=0
2016-06-23 03:17:48.035085 7f0ae37fe700 10 updating xattr: name=user.rgw.manifest bl.length()=0
2016-06-23 03:17:48.035087 7f0ae37fe700 10 updating xattr: name=user.rgw.x-amz-read bl.length()=2
2016-06-23 03:17:48.039124 7f09077fe700 10 cache put: name=default.rgw.data.root+.bucket.meta.pub5:4443cc88-2381-4fba-932d-7aff574748c6.1494154.1 info.flags=23
2016-06-23 03:17:48.039146 7f09077fe700 10 moving default.rgw.data.root+.bucket.meta.pub5:4443cc88-2381-4fba-932d-7aff574748c6.1494154.1 to cache LRU end
2016-06-23 03:17:48.039154 7f09077fe700 10 updating xattr: name=user.rgw.acl bl.length()=235
2016-06-23 03:17:48.039155 7f09077fe700 10 updating xattr: name=user.rgw.idtag bl.length()=0
2016-06-23 03:17:48.039156 7f09077fe700 10 updating xattr: name=user.rgw.manifest bl.length()=0
2016-06-23 03:17:48.039156 7f09077fe700 10 updating xattr: name=user.rgw.x-amz-read bl.length()=2
2016-06-23 03:17:48.039174 7f09077fe700 10 distributing notification oid=notify.6 bl.length()=1027
2016-06-23 03:17:48.040176 7f0ae37fe700 10 RGWWatcher::handle_notify() notify_id 2052994367840 cookie 93832456511456 notifier 1495819 bl.length()=1027
2016-06-23 03:17:48.040202 7f0ae37fe700 10 cache put: name=default.rgw.data.root+.bucket.meta.pub5:4443cc88-2381-4fba-932d-7aff574748c6.1494154.1 info.flags=23
2016-06-23 03:17:48.040207 7f0ae37fe700 10 moving default.rgw.data.root+.bucket.meta.pub5:4443cc88-2381-4fba-932d-7aff574748c6.1494154.1 to cache LRU end
2016-06-23 03:17:48.040211 7f0ae37fe700 10 updating xattr: name=user.rgw.acl bl.length()=235
2016-06-23 03:17:48.040212 7f0ae37fe700 10 updating xattr: name=user.rgw.idtag bl.length()=0
2016-06-23 03:17:48.040213 7f0ae37fe700 10 updating xattr: name=user.rgw.manifest bl.length()=0
2016-06-23 03:17:48.040214 7f0ae37fe700 10 updating xattr: name=user.rgw.x-amz-read bl.length()=2
2016-06-23 03:17:48.042645 7f09077fe700 2 req 63:0.014203:swift:POST /swift/v1/pub5:put_bucket_metadata:completing
2016-06-23 03:17:48.042744 7f09077fe700 2 req 63:0.014302:swift:POST /swift/v1/pub5:put_bucket_metadata:op status=1902
2016-06-23 03:17:48.042754 7f09077fe700 2 req 63:0.014313:swift:POST /swift/v1/pub5:put_bucket_metadata:http status=204
2016-06-23 03:17:48.042764 7f09077fe700 1 ====== req done req=0x7f09077f87d0 op status=1902 http_status=204 ======
2016-06-23 03:17:48.042782 7f09077fe700 20 process_request() returned -1902
2016-06-23 03:17:48.042811 7f09077fe700 1 civetweb: 0x7f08f80008c0: 10.10.20.9 - - [23/Jun/2016:03:17:48 -0400] "POST /swift/v1/pub5 HTTP/1.1" 204 0 - curl/7.35.0
2016-06-23 03:17:55.822874 7f0ae2ffd700 2 RGWDataChangesLog::ChangesRenewThread: start

RESULT

root@CONTROL1:~# curl -X GET -i -H "X-Auth-Token:xxxxxxxxxxxx" -L "http://xxxxxx:7480/swift/v1/pub5"
HTTP/1.1 204 No Content
X-Timestamp: 0.00000
X-Container-Object-Count: 0
X-Container-Bytes-Used-Actual: 0
X-Storage-Policy: default-placement
X-Trans-Id: tx000000000000000000040-00576b8d63-16d30b-default
Content-Length: 0
Accept-Ranges: bytes
Content-Type: text/plain; charset=utf-8 =============

acl is not set on the container. This works fine on infernalis.


Related issues

Duplicates rgw - Bug #15976: rgw: updating CORS/ACLs might not work in some circumstances Resolved 05/21/2016

History

#1 Updated by Nathan Cutler almost 8 years ago

  • Project changed from Ceph to rgw

#2 Updated by Radoslaw Zarzynski almost 8 years ago

  • Status changed from New to Duplicate

Duplicate of #15976.

#3 Updated by Radoslaw Zarzynski almost 8 years ago

  • Duplicates Bug #15976: rgw: updating CORS/ACLs might not work in some circumstances added

Also available in: Atom PDF