Ceph

This is on nautilus, but I skimmed the changelog and bug tracker and haven't found any reports about this, so I guess this is still valid for newer releases.

We have usernames that contain ":" for a lightweight internal namespace separation in our domain.

Recently we started using multi-zone replication and noticed that all keys for users on the receiving end will have their keys' usernames mangled by appending the last ":"-separated part twice.

On the origin side:

$ radosgw-admin user info --uid=user:withsuffix
{
    "user_id": "user:withsuffix",
    ...
    "keys": [
        {
            "user": "user:withsuffix",
            "access_key": "...",
            "secret_key": "..." 
        }
    ],
    ...
}

On the target side:

$ radosgw-admin user info --uid=user:withsuffix {
"user_id": "user:withsuffix",
...
"keys": [ {
"user": "user:withsuffix:withsuffix",
"access_key": "...",
"secret_key": "..."
}
],
...
}

Interestingly this only happens in the keys section, not the user_id itself. However, this causes access to be lost for those users until we scrub those entries.