[ceph-users] 403 AccessDenied with presigned url in Jewel AWS4.

[Khang Nguyễn Nhật]

Hi,
  I have a problem when using presigned url with AWS4 in RGW Jewel . My
cluster running on CentOS 7 and health is HEALTH_OK.
- This is my *User information*:

    "user_id": "1",
    "display_name": "KhangNN",
    "email": "khan...@ceph.com.vn",
    "suspended": 0,
    "max_buckets": 1000,
    "auid": 0,
    "subusers": [],
    "keys": [
        {
            "user": "1",
            "access_key": "VVEP64910WZEVFSHZ0ER",
            "secret_key": "UF8eM2BIlcLsXg5RF0gfK4JtZK7EmA64VGlPUJ0w"
        }
    ],
    "swift_keys": [],
    "caps": [],
    "op_mask": "read, write, delete",
    "default_placement": "",
    "placement_tags": [],
    "bucket_quota": {
        "enabled": false,
        "max_size_kb": -1,
        "max_objects": -1
    },
    "user_quota": {
        "enabled": false,
        "max_size_kb": -1,
        "max_objects": -1
    },
    "temp_url_keys": []

- *Python* code:

access_key = "VVEP64910WZEVFSHZ0ER"
secret_key = "UF8eM2BIlcLsXg5RF0gfK4JtZK7EmA64VGlPUJ0w"

s3 = boto3.client(service_name='s3', region_name='', use_ssl=False,
endpoint_url='http://192.168.1.10:8888', aws_access_key_id=access_key,
                  aws_secret_access_key= secret_key,
                  config=Config(signature_version='s3v4', region_name=''))

print s3.list_buckets() // It work fine !
//
url = s3.generate_presigned_url(ClientMethod='list_buckets',
HttpMethod='GET', ExpiresIn=1800)
requests.get(url, proxies={'http': '', 'https': ''}) // *403 AccessDenied*

- *Zone* infor:

    "id": "ef6eca77-29f6-4d5e-8d04-5c486ea7ad19",
    "name": "ap-southeast",
    "domain_root": "ap-southeast.rgw.data.root",
    "control_pool": "ap-southeast.rgw.control",
    "gc_pool": "ap-southeast.rgw.gc",
    "log_pool": "ap-southeast.rgw.log",
    "intent_log_pool": "ap-southeast.rgw.intent-log",
    "usage_log_pool": "ap-southeast.rgw.usage",
    "user_keys_pool": "ap-southeast.rgw.users.keys",
    "user_email_pool": "ap-southeast.rgw.users.email",
    "user_swift_pool": "ap-southeast.rgw.users.swift",
    "user_uid_pool": "ap-southeast.rgw.users.uid",
    "system_key": {
        "access_key": "",
        "secret_key": ""
    },
    "placement_pools": [
        {
            "key": "default-placement",
            "val": {
                "index_pool": "ap-southeast.rgw.buckets.index",
                "data_pool": "ap-southeast.rgw.buckets.data",
                "data_extra_pool": "ap-southeast.rgw.buckets.non-ec",
                "index_type": 0
            }
        }
    ],
    "metadata_heap": "ap-southeast.rgw.meta",
    "realm_id": "515b5a90-9d02-489f-b7e4-e67fb838fa1e"

- *Zonegroup* infor:

    "id": "3b6cbc8f-470e-4a3d-87ea-7941b6ae7206",
    "name": "ap",
    "api_name": "ap",
    "is_master": "true",
    "endpoints": [
        "http:\/\/192.168.1.10:8888"
    ],
    "hostnames": [],
    "hostnames_s3website": [],
    "master_zone": "ef6eca77-29f6-4d5e-8d04-5c486ea7ad19",
    "zones": [
        {
            "id": "ef6eca77-29f6-4d5e-8d04-5c486ea7ad19",
            "name": "ap-southeast",
            "endpoints": [
                "http:\/\/192.168.1.10:8888"
            ],
            "log_meta": "true",
            "log_data": "false",
            "bucket_index_max_shards": 0,
            "read_only": "false"
        }
    ],
    "placement_targets": [
        {
            "name": "default-placement",
            "tags": []
        }
    ],
    "default_placement": "default-placement",
    "realm_id": "515b5a90-9d02-489f-b7e4-e67fb838fa1e"

I have configured something wrong ? Can somebody please help me out ?
Thank !

_______________________________________________
ceph-users mailing list
ceph-users@lists.ceph.com
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com