Project

General

Profile

Actions

Backport #22259

closed

jewel: rgw: swift anonymous access doesn't work in jewel

Added by Marcus Watts over 6 years ago. Updated about 6 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Target version:
Release:
jewel
Pull request ID:
Crash signature (v1):
Crash signature (v2):

Actions #1

Updated by Marcus Watts over 6 years ago

I have a pull request for the fix: https://github.com/ceph/ceph/pull/19194

Actions #2

Updated by Nathan Cutler over 6 years ago

  • Tracker changed from Tasks to Backport
  • Project changed from Stable releases to rgw
  • Status changed from New to Fix Under Review
  • Assignee set to Marcus Watts

This is a jewel-only bugfix.

Actions #3

Updated by Nathan Cutler over 6 years ago

  • Description updated (diff)

description

In ceph jewel, it is possible to store swift read acls of the form ".r:*", but these do not have the expected effect of allowing "anonymous" access to the bucket contents. In more recent versions of ceph (luminous/master), this works fine. This problem manifests when using keystone and rgw_swift_account_in_url. From the logs, it appears that the tenant from the URL is being ignored.

luminous/master have very different code for this functionality, so this isn't a simple backport. However, the fix appears to be easy: just a few lines in rgw_rest_swift.cc to set the tenant seems to suffice.

Actions #4

Updated by Nathan Cutler over 6 years ago

  • Subject changed from rgw: swift anonymous access doesn't work in jewel to jewel: rgw: swift anonymous access doesn't work in jewel
Actions #5

Updated by Nathan Cutler about 6 years ago

  • Status changed from Fix Under Review to In Progress
Actions #6

Updated by Nathan Cutler about 6 years ago

  • Status changed from In Progress to Resolved
  • Target version set to v10.2.11
Actions

Also available in: Atom PDF