Project

General

Profile

Bug #23089

rgw: change order of authentication back to local, remote

Added by Abhishek Lekshmanan over 3 years ago. Updated almost 3 years ago.

Status:
Resolved
Priority:
High
Target version:
-
% Done:

0%

Source:
Tags:
Backport:
luminous mimic
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):

Description

from luminous we changed the order of rgw authentication to first try external before attempting locally, this can have adverse impacts esp. when openstack keystone and S3v4 authentication is involved which will lead to an overloaded keystone which has to compute every request regardless of whether the user is a keystone user or not. For eg. in multisite the system user would first authenticate against keystone & fail before rgw authenticates and passes the user. Revert the order back to Local -> external


Related issues

Copied to rgw - Backport #24546: luminous: rgw: change order of authentication back to local, remote Resolved
Copied to rgw - Backport #24547: mimic: rgw: change order of authentication back to local, remote Resolved

History

#1 Updated by Casey Bodley over 3 years ago

  • Status changed from New to 12

#2 Updated by Yehuda Sadeh over 3 years ago

  • Status changed from 12 to 7

#3 Updated by Matt Benjamin over 3 years ago

  • Assignee set to Abhishek Lekshmanan

#4 Updated by Abhishek Lekshmanan over 3 years ago

  • Status changed from 7 to In Progress

#5 Updated by Abhishek Lekshmanan over 3 years ago

  • Status changed from In Progress to Fix Under Review

#6 Updated by Yehuda Sadeh about 3 years ago

  • Status changed from Fix Under Review to 7

#7 Updated by Casey Bodley about 3 years ago

  • Status changed from 7 to Pending Backport
  • Backport set to luminous mimic

#8 Updated by Nathan Cutler about 3 years ago

  • Copied to Backport #24546: luminous: rgw: change order of authentication back to local, remote added

#9 Updated by Nathan Cutler about 3 years ago

  • Copied to Backport #24547: mimic: rgw: change order of authentication back to local, remote added

#10 Updated by Nathan Cutler almost 3 years ago

  • Status changed from Pending Backport to Resolved

Also available in: Atom PDF