Re: How to use Admin Ops API in Ceph Object Storage

"Jeppesen, Nelson" <Nelson.Jeppesen@xxxxxxxxxx> · Fri, 1 Nov 2013 16:18:45 -0700

Looks like the thread was striped, let me add it back in:

-----Mensaje original-----
De: Yehuda Sadeh [mailto:yehuda at inktank.com] 
Enviado el: miércoles, 10 de julio de 2013 16:50
Para: Alvaro Izquierdo Jimeno
CC: Bright; ceph-users
Asunto: Re:  How to use Admin Ops API in Ceph Object Storage

On Wed, Jul 10, 2013 at 1:07 AM, Alvaro Izquierdo Jimeno <aizquierdo at aubay.es> wrote:
>>Hi all,
>> 
>> I have been able to create an user with --caps="usage=read, write" and 
>> bring its usages with  GET /admin/usage?format=json HTTP/1.1
>>  Host: ceph-server
>>  Authorization: AWS {access-key}:{hash-of-header-and-secret}
>> 
>> After of this, I have created an user with --caps="user=read, write", 
>> but I can't bring its user info with GET /admin/user?format=json 
>> HTTP/1.1
>>  Host: ceph-server
>>  Authorization: AWS {access-key}:{hash-of-header-and-secret}
>> 
>> 403 forbidden is responsed.

>Any other info in the rgw log?

This is the user info:
{ "user_id": "aij219",
  "display_name": "aij219",
  "email": "",
  "suspended": 0,
  "max_buckets": 1000,
  "auid": 0,
  "subusers": [],
  "keys": [
        { "user": "aij219",
          "access_key": "831Q3WV3H9V3EAJ9ZM77",
          "secret_key": "tfVMA1CGe5ZHMrK+bZfz7v84pvOoTQbgUePnt1T6"}],
  "swift_keys": [],
  "caps": [
        { "type": "user",
          "perm": "*"}]}

Attached you can find the log.

>> 
>> And just another comment. When I try to  modify an user, I can't 
>> change the caps field. The command radosgw-admin user modify --uid="user"  --caps="usage=read, write"
>> doesn't fail, but doesn't update the user.

>Right. There's the radosgw-admin caps add / rm command to do that for you.

Oops, i didn't know this option. Sorry...

>> 
>> Many thanks and best regards,
>> Álvaro.
>> 
>> 
>> 
>> -----Mensaje original-----
>> De: ceph-users-bounces at lists.ceph.com 
>> [mailto:ceph-users-bounces at lists.ceph..com] En nombre de Yehuda Sadeh 
>> Enviado el: martes, 09 de julio de 2013 18:27
>> Para: Bright
>> CC: ceph-users
>> Asunto: Re:  How to use Admin Ops API in Ceph Object 
>> Storage
>> 
>> On Mon, Jul 8, 2013 at 8:51 AM, Bright <hjiang at foxmail.com> wrote:
>>> Hello Guys:
>>> 
>>>      I am working with ceph nowadys and i want to setup a system 
>>> which
>>> 
>>>      includes a web page to create the ceph object storage user.
>>> 
>>>      So, i tried to use Admin Ops API to fulfill my needs. However, 
>>> if i use
>>> 
>>>       GET /admin/usage?format=json HTTP/1.1
>>> 
>>> Host: ceph-server
>>> 
>>>      it will return 403 access denied.
>>> 
>>>      Than, i tried to use
>>> 
>>> GET /admin/usage?format=json HTTP/1.1
>>> Host: ceph-server
>>> Authorization: AWS {access-key}:{hash-of-header-and-secret}
>>> 
>>>      I used the key of client.user to represent access-key
>> 
>> You need to create rgw user for that (radosgw-admin user create) and use it.. The user itself should have the 'usage' caps set ( --caps="usage=read, write").
>> 
>>> 
>>>      and get the hash-of-header-and-secret accordingly.
>>>> 
>>> However, it still  returns 403 access denied.
>>> 
>>>      Can anyone explain the method to deal with Admin Ops API, thanks!
>>> 
>>> 
>>> ------------------
>>> Hui Jiang
>>> East China University of Science and Technology
>>> 130 MeiLong Rd. Shanghai, China 200237 Mobile +86 13774493120 E-mail 
>>> hjiang at foxmail.com
>>> 
>>> 
>>> 
>>> _______________________________________________
>>> ceph-users mailing list
>>> ceph-users at lists.ceph.com
>>> http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
>>> 
>> _______________________________________________
>> ceph-users mailing list
>> ceph-users at lists.ceph.com
>> http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
>> ____________
>> Verificada la ausencia de virus por G Data AntiVirus
>> Versión: AVA 22.10857 del 10.07.2013
>> Noticias de virus: www.antiviruslab.com

____________
Verificada la ausencia de virus por G Data AntiVirus 
Versión: AVA 22.10883 del 11.07.2013 
Noticias de virus: www.antiviruslab.com
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: get_user_info.txt
URL: <http://lists.ceph.com/pipermail/ceph-users-ceph.com/attachments/20130711/d79cffac/attachment.txt>

Nelson Jeppesen____________                        
    Disney Technology Solutions and Services
    Phone 206-588-5001

_______________________________________________
ceph-users mailing list
ceph-users@xxxxxxxxxxxxxx
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com