Bug 2271399
Summary: | [rgw-ms][assume-role]:After a successful assume role api call on the secondary site, s3 bucket create fails with http_status 403 | |||
---|---|---|---|---|
Product: | [Red Hat Storage] Red Hat Ceph Storage | Reporter: | Vidushi Mishra <vimishra> | |
Component: | RGW-Multisite | Assignee: | Pritha Srivastava <prsrivas> | |
Status: | CLOSED ERRATA | QA Contact: | Vidushi Mishra <vimishra> | |
Severity: | high | Docs Contact: | Akash Raj <akraj> | |
Priority: | unspecified | |||
Version: | 7.1 | CC: | akraj, ceph-eng-bugs, cephqe-warriors, hmaheswa, mbenjamin, prsrivas, smanjara, tserlin | |
Target Milestone: | --- | Keywords: | Automation | |
Target Release: | 7.1 | |||
Hardware: | Unspecified | |||
OS: | Unspecified | |||
Whiteboard: | ||||
Fixed In Version: | ceph-18.2.1-120.el9cp | Doc Type: | Bug Fix | |
Doc Text: |
.The authentication of the forwarded request on the primary site no longer fails
Previously, an S3 request issued to secondary failed if temporary credentials returned by STS were used to sign the request. The failure occured because the request would be forwarded to the primary and signed using a system user's credentials which do not match the temporary credentials in the session token of the forwarded request. As a result of unmatched credentials, the authentication of the forwarded request on the primary site fails, which results in the failure of the S3 operation.
With this fix, the authentication is by-passed by using temporary credentials in the session token in case a request is forwarded from secondary to primary. The system user's credentials are used to complete the authentication successfully.
|
Story Points: | --- | |
Clone Of: | ||||
: | 2271595 2293036 (view as bug list) | Environment: | ||
Last Closed: | 2024-06-13 14:30:27 UTC | Type: | Bug | |
Regression: | --- | Mount Type: | --- | |
Documentation: | --- | CRM: | ||
Verified Versions: | Category: | --- | ||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
Cloudforms Team: | --- | Target Upstream Version: | ||
Embargoed: | ||||
Bug Depends On: | ||||
Bug Blocks: | 2267614, 2271595, 2273547, 2293036, 2298578, 2298579 |
Comment 19
errata-xmlrpc
2024-06-13 14:30:27 UTC
|