I'm attempting to create a user using S3 interface, however, I keep getting access denied. Here is the debugging info from the radosgw.log file for my request (for space I've removed the time stamp at the beginning of each line). The only strange thing that I see is: required_mask= 0 user.op_mask=7. Unfortunately, I'm not finding good documentation on the op_mask.
Any help is greatly appreciated: 7f5815ff3700 20 dequeued request req=0x194b010 7f5815ff3700 20 RGWWQ: empty 7f5815ff3700 1 ====== starting new request req=0x194b010 ===== 7f5815ff3700 2 req 43505:0.000061::PUT /admin/user::initializing 7f5815ff3700 10 host=rados.openstack.lab.dev.liquidweb.com rgw_dns_name=rados.openstack.lab.dev.liquidweb.com 7f5815ff3700 20 FCGI_ROLE=RESPONDER 7f5815ff3700 20 SCRIPT_URL=/admin/user 7f5815ff3700 20 SCRIPT_URI=http://rados.openstack.lab.dev.liquidweb.com/admin/user 7f5815ff3700 20 HTTP_AUTHORIZATION=AWS 8A038P4I1XKLKLD12VT1:rzrZsseFWuki57UCNRUQ5Cq5SX4= 7f5815ff3700 20 HTTP_TE=deflate,gzip;q=0.3 7f5815ff3700 20 HTTP_KEEP_ALIVE=300 7f5815ff3700 20 HTTP_CONNECTION=Keep-Alive, TE 7f5815ff3700 20 HTTP_DATE=Fri, 04 Apr 2014 19:23:53 GMT 7f5815ff3700 20 HTTP_HOST=rados.openstack.lab.dev.liquidweb.com 7f5815ff3700 20 HTTP_USER_AGENT=libwww-perl/5.805 7f5815ff3700 20 HTTP_DISPLAY_NAME=testing_by_hand 7f5815ff3700 20 HTTP_UID=testing_by_hand 7f5815ff3700 20 PATH=/usr/local/bin:/usr/bin:/bin 7f5815ff3700 20 SERVER_SIGNATURE= 7f5815ff3700 20 SERVER_SOFTWARE=Apache/2.2.22 (Ubuntu) 7f5815ff3700 20 SERVER_NAME=rados.openstack.lab.dev.liquidweb.com 7f5815ff3700 20 SERVER_ADDR=10.30.177.45 7f5815ff3700 20 SERVER_PORT=80 7f5815ff3700 20 REMOTE_ADDR=10.255.247.241 7f5815ff3700 20 DOCUMENT_ROOT=/var/www 7f5815ff3700 20 SERVER_ADMIN=scar...@liquidweb.com 7f5815ff3700 20 SCRIPT_FILENAME=/var/www/s3gw.fcgi 7f5815ff3700 20 REMOTE_PORT=53062 7f5815ff3700 20 GATEWAY_INTERFACE=CGI/1.1 7f5815ff3700 20 SERVER_PROTOCOL=HTTP/1.1 7f5815ff3700 20 REQUEST_METHOD=PUT 7f5815ff3700 20 QUERY_STRING=page=admin¶ms=/user 7f5815ff3700 20 REQUEST_URI=/admin/user 7f5815ff3700 20 SCRIPT_NAME=/admin/user 7f5815ff3700 2 req 43505:0.000135::PUT /admin/user::getting op 7f5815ff3700 2 req 43505:0.000140::PUT /admin/user:create_user:authorizing 7f5815ff3700 20 get_obj_state: rctx=0x7f585c003e20 obj=.users:8A038P4I1XKLKLD12VT1 state=0x7f585c0054f8 s->prefetch_data=0 7f5815ff3700 10 moving .users+8A038P4I1XKLKLD12VT1 to cache LRU end 7f5815ff3700 10 cache get: name=.users+8A038P4I1XKLKLD12VT1 : hit 7f5815ff3700 20 get_obj_state: s->obj_tag was set empty 7f5815ff3700 10 moving .users+8A038P4I1XKLKLD12VT1 to cache LRU end 7f5815ff3700 10 cache get: name=.users+8A038P4I1XKLKLD12VT1 : hit 7f5815ff3700 20 get_obj_state: rctx=0x7f585c003e20 obj=.users.uid:etank state=0x7f585c005c98 s->prefetch_data=0 7f5815ff3700 10 moving .users.uid+etank to cache LRU end 7f5815ff3700 10 cache get: name=.users.uid+etank : hit 7f5815ff3700 20 get_obj_state: s->obj_tag was set empty 7f5815ff3700 10 moving .users.uid+etank to cache LRU end 7f5815ff3700 10 cache get: name=.users.uid+etank : hit 7f5815ff3700 10 get_canon_resource(): dest=/admin/user 7f5815ff3700 10 auth_hdr: PUT Fri, 04 Apr 2014 19:23:53 GMT /admin/user 7f5815ff3700 15 calculated digest=rzrZsseFWuki57UCNRUQ5Cq5SX4= 7f5815ff3700 15 auth_sign=rzrZsseFWuki57UCNRUQ5Cq5SX4= 7f5815ff3700 15 compare=0 7f5815ff3700 2 req 43505:0.000341::PUT /admin/user:create_user:reading permissions 7f5815ff3700 2 req 43505:0.000346::PUT /admin/user:create_user:init op 7f5815ff3700 2 req 43505:0.000349::PUT /admin/user:create_user:verifying op mask 7f5815ff3700 20 required_mask= 0 user.op_mask=7 7f5815ff3700 2 req 43505:0.000354::PUT /admin/user:create_user:verifying op permissions 7f5815ff3700 2 req 43505:0.000358::PUT /admin/user:create_user:verifying op params 7f5815ff3700 2 req 43505:0.000361::PUT /admin/user:create_user:executing 7f5815ff3700 2 req 43505:0.000398::PUT /admin/user:create_user:http status=403 7f5815ff3700 1 ====== req done req=0x194b010 http_status=403 ====== Erik Tank et...@liquidweb.com _______________________________________________ ceph-users mailing list ceph-users@lists.ceph.com http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
