Project

General

Profile

Bug #23089

rgw: change order of authentication back to local, remote

Added by Abhishek Lekshmanan over 1 year ago. Updated 10 months ago.

Status:
Resolved
Priority:
High
Target version:
-
Start date:
02/22/2018
Due date:
% Done:

0%

Source:
Tags:
Backport:
luminous mimic
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:

Description

from luminous we changed the order of rgw authentication to first try external before attempting locally, this can have adverse impacts esp. when openstack keystone and S3v4 authentication is involved which will lead to an overloaded keystone which has to compute every request regardless of whether the user is a keystone user or not. For eg. in multisite the system user would first authenticate against keystone & fail before rgw authenticates and passes the user. Revert the order back to Local -> external


Related issues

Copied to rgw - Backport #24546: luminous: rgw: change order of authentication back to local, remote Resolved
Copied to rgw - Backport #24547: mimic: rgw: change order of authentication back to local, remote Resolved

History

#1 Updated by Casey Bodley over 1 year ago

  • Status changed from New to Verified

#2 Updated by Yehuda Sadeh over 1 year ago

  • Status changed from Verified to Testing

#3 Updated by Matt Benjamin about 1 year ago

  • Assignee set to Abhishek Lekshmanan

#4 Updated by Abhishek Lekshmanan about 1 year ago

  • Status changed from Testing to In Progress

#5 Updated by Abhishek Lekshmanan about 1 year ago

  • Status changed from In Progress to Need Review

#6 Updated by Yehuda Sadeh about 1 year ago

  • Status changed from Need Review to Testing

#7 Updated by Casey Bodley about 1 year ago

  • Status changed from Testing to Pending Backport
  • Backport set to luminous mimic

#8 Updated by Nathan Cutler about 1 year ago

  • Copied to Backport #24546: luminous: rgw: change order of authentication back to local, remote added

#9 Updated by Nathan Cutler about 1 year ago

  • Copied to Backport #24547: mimic: rgw: change order of authentication back to local, remote added

#10 Updated by Nathan Cutler 10 months ago

  • Status changed from Pending Backport to Resolved

Also available in: Atom PDF