Project

General

Profile

Bug #21607

rgw: s3 v4 auth fails teuthology s3-tests: test_object_header_acl_grants test_bucket_header_acl_grants

Added by Marcus Watts almost 2 years ago. Updated almost 2 years ago.

Status:
Pending Upstream
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
Start date:
09/29/2017
Due date:
% Done:

0%

Source:
Tags:
Backport:
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:

Description

When running teuthology s3-tests with the environment variable "S3_USE_SIGV4=1", awsv4 signatures are enabled.

When this is done, these tests fail:
ERROR: s3tests.functional.test_s3.test_object_header_acl_grants
ERROR: s3tests.functional.test_s3.test_bucket_header_acl_grants

This fails doing awsv4 signatures, and the exact error appears to be in the sort order of "x-amz-grant-read-acp" vs. "x-amz-grant-read", "x-amz-grant-write-acp" vs. "x-amz-grant-write". It appears that the expected behavior is to sort the entire header line (which includes a ":" which sorts after "-", and not just the field name.

This behavior appers in both jewel and master.


Related issues

Related to rgw - Bug #21832: boto3 v4 SignatureDoesNotMatch failure due to sorting of sse-kms headers Resolved 10/18/2017

History

#1 Updated by Casey Bodley almost 2 years ago

  • Related to Bug #21832: boto3 v4 SignatureDoesNotMatch failure due to sorting of sse-kms headers added

#2 Updated by Casey Bodley almost 2 years ago

This appears to be a boto2 client bug, as reported in https://github.com/boto/boto/pull/3032.

#3 Updated by Ken Dreyer almost 2 years ago

  • Status changed from New to Pending Upstream
  • Backport deleted (jewel, luminous)

Unmarking this for backporting.

To be clear: the original RGW commit at https://github.com/ceph/ceph/pull/18046 was wrong, and we reverted this in #21832 . Please don't cherry-pick this PR anywhere :)

#4 Updated by Nathan Cutler almost 2 years ago

Thanks, Ken!

#5 Updated by Kefu Chai almost 2 years ago

Ken, Nathan, i merged https://github.com/ceph/ceph/pull/18165 before i read this ticket. shall we backport the revert PR?

#6 Updated by Matt Benjamin almost 2 years ago

Kefu, https://github.com/ceph/ceph/pull/18165 is about xfs vs. btrfs in filestore?

Matt

#7 Updated by Matt Benjamin almost 2 years ago

kefu, if https://github.com/ceph/ceph/pull/18080 merged into Jewel, I think it needs a revert.

Matt

#8 Updated by Kefu Chai almost 2 years ago

  • Assignee set to Kefu Chai

@Matt sorry for the typo, it's https://github.com/ceph/ceph/pull/18080.

and ack. will backport the revert.

#10 Updated by Kefu Chai almost 2 years ago

  • Assignee deleted (Kefu Chai)

Also available in: Atom PDF