Bug 1497299

Summary: Swift gets a permission denied
Product: [Red Hat Storage] Red Hat Ceph Storage Reporter: David Vallee Delisle <dvd>
Component: RGWAssignee: Matt Benjamin (redhat) <mbenjamin>
Status: CLOSED NOTABUG QA Contact: ceph-qe-bugs <ceph-qe-bugs>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 2.3CC: cbodley, ceph-eng-bugs, dvd, ipetrova, kbader, mbenjamin, nkinder, owasserm, sweil, vumrao
Target Milestone: rc   
Target Release: 3.1   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2017-10-06 13:06:49 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description David Vallee Delisle 2017-09-29 16:46:45 UTC 
Description of problem:


Please, have a look at:
https://bugzilla.redhat.com/show_bug.cgi?id=1495538#c10


Something works since it's able to detect if bucket exists or not

~~~
$ swift list firstbucket
Container u'firstbucket' not found

$ swift list foobar
Container GET failed: https://ch-dc-s3-gsn-33.eecloud.nsn-net.net:10032/foobar?format=json 403 Forbidden  [first 60 chars of response] {"Code":"AccessDenied","BucketName":"foobar","RequestId":"tx

$ swift post firstbucket
Container PUT failed: https://ch-dc-s3-gsn-33.eecloud.nsn-net.net:10032/firstbucket 403 Forbidden  [first 60 chars of response] <?xml version="1.0" encoding="UTF-8"?><Error><Code>AccessDen
~~~


Actual results:
...
2017-09-29 08:39:15.270706 7efc6cfe1700  2 req 2:0.000074:s3:PUT /firstbucket:create_bucket:verifying op mask
2017-09-29 08:39:15.270708 7efc6cfe1700 20 required_mask= 2 user.op_mask=7
2017-09-29 08:39:15.270709 7efc6cfe1700  2 req 2:0.000077:s3:PUT /firstbucket:create_bucket:verifying op permissions
2017-09-29 08:39:15.270713 7efc6cfe1700 20 op->ERRORHANDLER: err_no=-13 new_err_no=-13
2017-09-29 08:39:15.270782 7efc6cfe1700  2 req 2:0.000150:s3:PUT /firstbucket:create_bucket:op status=0
2017-09-29 08:39:15.270788 7efc6cfe1700  2 req 2:0.000156:s3:PUT /firstbucket:create_bucket:http status=403
2017-09-29 08:39:15.270794 7efc6cfe1700  1 ====== req done req=0x7efc6cfdb710 op status=0 http_status=403 ======
2017-09-29 08:39:15.270800 7efc6cfe1700 20 process_request() returned -13
2017-09-29 08:39:15.270829 7efc6cfe1700  1 civetweb: 0x7efe78005f70: 127.0.0.1 - - [29/Sep/2017:08:39:15 -0500] "PUT /firstbucket HTTP/1.1" 403 0 - python-swiftclient-3.3.0
...