Project

General

Profile

Bug #1855

Creation of a subuser that appears to own an s3 key is possible, and removing the subuser with --purge-keys does not appear to remove the s3 key

Added by Matthew Wodrich over 7 years ago. Updated over 6 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Target version:
Start date:
12/22/2011
Due date:
% Done:

70%

Source:
Tags:
Backport:
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:

Associated revisions

Revision 5db3a9e7 (diff)
Added by caleb miles over 6 years ago

rgw_admin.cc: Disallow addition of S3 keys with subuser creation

Fixes: #1855
It is no longer possible to create a subuser and new S3 key associated
with that user through the radosgw-admin utility. In reference to Bug 1855
http://tracker.newdream.net/issues/1855.

Reviewed-by: Yehuda Sadeh <>
Signed-off-by: caleb miles <>

History

#1 Updated by Yehuda Sadeh about 7 years ago

  • Category set to 22

#2 Updated by Yehuda Sadeh over 6 years ago

  • Assignee set to caleb miles

#3 Updated by Sage Weil over 6 years ago

  • Project changed from Ceph to rgw
  • Category deleted (22)

#4 Updated by Yehuda Sadeh over 6 years ago

  • Target version set to Ceph - v0.51

#5 Updated by caleb miles over 6 years ago

  • Status changed from New to Verified

This bug can be reproduced by using the following options

./radosgw-admin -c {'ceph.conf'} --rgw-socket-path=/tmp/rgw.socket -f --log-to-stderr subuser create --uid={'user_id'} 
--subuser={'subuser_name'} --key-type=s3 --access-key={'some_access_key'} --secret={'some_secret_key'}

#6 Updated by caleb miles over 6 years ago

  • % Done changed from 0 to 70

#7 Updated by Yehuda Sadeh over 6 years ago

  • Status changed from Verified to Resolved

Commit 5db3a9e71c6b757660d0702efada40af6be63eb8 pushed. We disallow creating s3 key when subuser is created in order to avoid any confusion. Subusers are swift.

Also available in: Atom PDF