Description of problem:
When using LDAP or LDAP-sts light with HDP/S3A we can list and delete to a bucket, but we cannot put objects.
We are testing to auth methods:
- Plain LDAP auth
- STS-lite authentication
When using the AWS CLI we are able to do all operations without issues in both of the cases plain ldap and STS-lite.
When again testing using the same exact credentials with HDP/S3A we get very strange behaviour:
- Plain LDAP auth: we are able to list and delete objects, we can't put objects into buckets(or create folder/objetcs), we get a 400 error from the ldap engine
- STS-lite auth: we are able to list and delete objects, we can't put objects into buckets(or create folder/objetcs), we get a 403 error from the STSengine. (with STS-light we are using a S3A provider that we give it the STS credentials, so it's not running the getssesion API call, it just using the STS creds and token created previously)
Version-Release number of selected component (if applicable):
4.1
Additional info:
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory (Important: Red Hat Ceph Storage security, bug fix, and enhancement Update), and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.
https://access.redhat.com/errata/RHSA-2021:1452