Actions
Bug #23089
closedrgw: change order of authentication back to local, remote
% Done:
0%
Source:
Tags:
Backport:
luminous mimic
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):
Description
from luminous we changed the order of rgw authentication to first try external before attempting locally, this can have adverse impacts esp. when openstack keystone and S3v4 authentication is involved which will lead to an overloaded keystone which has to compute every request regardless of whether the user is a keystone user or not. For eg. in multisite the system user would first authenticate against keystone & fail before rgw authenticates and passes the user. Revert the order back to Local -> external
Updated by Abhishek Lekshmanan about 6 years ago
- Status changed from 7 to In Progress
Updated by Abhishek Lekshmanan about 6 years ago
- Status changed from In Progress to Fix Under Review
Updated by Yehuda Sadeh almost 6 years ago
- Status changed from Fix Under Review to 7
Updated by Casey Bodley almost 6 years ago
- Status changed from 7 to Pending Backport
- Backport set to luminous mimic
Updated by Nathan Cutler almost 6 years ago
- Copied to Backport #24546: luminous: rgw: change order of authentication back to local, remote added
Updated by Nathan Cutler almost 6 years ago
- Copied to Backport #24547: mimic: rgw: change order of authentication back to local, remote added
Updated by Nathan Cutler over 5 years ago
- Status changed from Pending Backport to Resolved
Actions