Re: Custom ACL's are not being honoured.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 


You were right. Sorry for the misdirection.

logs for getacl:
================
2014-01-08 17:58:37.228949 7faae2d93780 20 enqueued request req=0x2182c90
2014-01-08 17:58:37.228968 7faae2d93780 20 RGWWQ:
2014-01-08 17:58:37.228970 7faae2d93780 20 req: 0x2182c90
2014-01-08 17:58:37.228976 7faae2d93780 10 allocated request req=0x21829b0
2014-01-08 17:58:37.228999 7faa4ffdf700 20 dequeued request req=0x2182c90
2014-01-08 17:58:37.229009 7faa4ffdf700 20 RGWWQ: empty
2014-01-08 17:58:37.229015 7faa4ffdf700  1 ====== starting new request req=0x2182c90 =====
2014-01-08 17:58:37.229069 7faa4ffdf700  2 req 21:0.000054::GET /Test3::initializing
2014-01-08 17:58:37.229076 7faa4ffdf700 10 host=isp.inmobi.com rgw_dns_name=isp.inmobi.com
2014-01-08 17:58:37.229106 7faa4ffdf700 10 s->object=<NULL> s->bucket=Test3
2014-01-08 17:58:37.229112 7faa4ffdf700 20 FCGI_ROLE=RESPONDER
2014-01-08 17:58:37.229113 7faa4ffdf700 20 SCRIPT_URL=/Test3
2014-01-08 17:58:37.229114 7faa4ffdf700 20 SCRIPT_URI=http://isp.inmobi.com/Test3
2014-01-08 17:58:37.229115 7faa4ffdf700 20 HTTP_AUTHORIZATION=AWS RDDGMHRBXJN6HY3BOEO7:5Dl428zBfcGMrNknuT6VwIFkYnE=
2014-01-08 17:58:37.229116 7faa4ffdf700 20 HTTP_HOST=isp.inmobi.com
2014-01-08 17:58:37.229117 7faa4ffdf700 20 HTTP_USER_AGENT=aws-sdk-php2/2.1.0 Guzzle/3.1.2 curl/7.19.7 PHP/5.3.2-1ubuntu4.22
2014-01-08 17:58:37.229119 7faa4ffdf700 20 HTTP_DATE=Wed, 08 Jan 2014 17:58:36 +0000
2014-01-08 17:58:37.229120 7faa4ffdf700 20 PATH=/usr/local/bin:/usr/bin:/bin
2014-01-08 17:58:37.229120 7faa4ffdf700 20 SERVER_SIGNATURE=
2014-01-08 17:58:37.229121 7faa4ffdf700 20 SERVER_SOFTWARE=Apache/2.2.22 (Ubuntu)
2014-01-08 17:58:37.229121 7faa4ffdf700 20 SERVER_NAME=isp.inmobi.com
2014-01-08 17:58:37.229122 7faa4ffdf700 20 SERVER_ADDR=10.2.4.203
2014-01-08 17:58:37.229122 7faa4ffdf700 20 SERVER_PORT=80
2014-01-08 17:58:37.229123 7faa4ffdf700 20 REMOTE_ADDR=10.14.100.34
2014-01-08 17:58:37.229124 7faa4ffdf700 20 DOCUMENT_ROOT=/var/www
2014-01-08 17:58:37.229124 7faa4ffdf700 20 SERVER_ADMIN=app-ops@xxxxxxxxxx
2014-01-08 17:58:37.229125 7faa4ffdf700 20 SCRIPT_FILENAME=/var/www/s3gw.fcgi
2014-01-08 17:58:37.229125 7faa4ffdf700 20 REMOTE_PORT=50682
2014-01-08 17:58:37.229126 7faa4ffdf700 20 GATEWAY_INTERFACE=CGI/1.1
2014-01-08 17:58:37.229126 7faa4ffdf700 20 SERVER_PROTOCOL=HTTP/1.1
2014-01-08 17:58:37.229127 7faa4ffdf700 20 REQUEST_METHOD=GET
2014-01-08 17:58:37.229127 7faa4ffdf700 20 QUERY_STRING=page=Test3&params=&acl
2014-01-08 17:58:37.229128 7faa4ffdf700 20 REQUEST_URI=/Test3?acl
2014-01-08 17:58:37.229129 7faa4ffdf700 20 SCRIPT_NAME=/Test3
2014-01-08 17:58:37.229130 7faa4ffdf700  2 req 21:0.000115:s3:GET /Test3::getting op
2014-01-08 17:58:37.229134 7faa4ffdf700  2 req 21:0.000119:s3:GET /Test3:get_acls:authorizing
2014-01-08 17:58:37.229156 7faa4ffdf700 20 get_obj_state: rctx=0x7fa9b4004670 obj=.us-east-1.users:RDDGMHRBXJN6HY3BOEO7 state=0x7fa9b4004738 s->prefetch_data=0
2014-01-08 17:58:37.229166 7faa4ffdf700 10 moving .us-east-1.users+RDDGMHRBXJN6HY3BOEO7 to cache LRU end
2014-01-08 17:58:37.229169 7faa4ffdf700 10 cache get: name=.us-east-1.users+RDDGMHRBXJN6HY3BOEO7 : hit
2014-01-08 17:58:37.229177 7faa4ffdf700 20 get_obj_state: s->obj_tag was set empty
2014-01-08 17:58:37.229182 7faa4ffdf700 10 moving .us-east-1.users+RDDGMHRBXJN6HY3BOEO7 to cache LRU end
2014-01-08 17:58:37.229184 7faa4ffdf700 10 cache get: name=.us-east-1.users+RDDGMHRBXJN6HY3BOEO7 : hit
2014-01-08 17:58:37.229199 7faa4ffdf700 20 get_obj_state: rctx=0x7fa9b4004a50 obj=.us-east-1.users.uid:app-ops state=0x7fa9b4004738 s->prefetch_data=0
2014-01-08 17:58:37.229206 7faa4ffdf700 10 moving .us-east-1.users.uid+app-ops to cache LRU end
2014-01-08 17:58:37.229208 7faa4ffdf700 10 cache get: name=.us-east-1.users.uid+app-ops : hit
2014-01-08 17:58:37.229212 7faa4ffdf700 20 get_obj_state: s->obj_tag was set empty
2014-01-08 17:58:37.229215 7faa4ffdf700 10 moving .us-east-1.users.uid+app-ops to cache LRU end
2014-01-08 17:58:37.229216 7faa4ffdf700 10 cache get: name=.us-east-1.users.uid+app-ops : hit
2014-01-08 17:58:37.229264 7faa4ffdf700 10 get_canon_resource(): dest=/Test3?acl
2014-01-08 17:58:37.229267 7faa4ffdf700 10 auth_hdr:
GET


Wed, 08 Jan 2014 17:58:36 +0000
/Test3?acl
2014-01-08 17:58:37.229330 7faa4ffdf700 15 calculated digest=5Dl428zBfcGMrNknuT6VwIFkYnE=
2014-01-08 17:58:37.229332 7faa4ffdf700 15 auth_sign=5Dl428zBfcGMrNknuT6VwIFkYnE=
2014-01-08 17:58:37.229333 7faa4ffdf700 15 compare=0
2014-01-08 17:58:37.229335 7faa4ffdf700 20 system request
2014-01-08 17:58:37.229338 7faa4ffdf700  2 req 21:0.000323:s3:GET /Test3:get_acls:reading permissions
2014-01-08 17:58:37.229349 7faa4ffdf700 20 get_obj_state: rctx=0x7fa9b4000ee0 obj=.us-east-1.rgw:Test3 state=0x7fa9b40062c8 s->prefetch_data=0
2014-01-08 17:58:37.229356 7faa4ffdf700 10 moving .us-east-1.rgw+Test3 to cache LRU end
2014-01-08 17:58:37.229357 7faa4ffdf700 10 cache get: name=.us-east-1.rgw+Test3 : hit
2014-01-08 17:58:37.229360 7faa4ffdf700 20 get_obj_state: s->obj_tag was set empty
2014-01-08 17:58:37.229363 7faa4ffdf700 20 Read xattr: user.rgw.idtag
2014-01-08 17:58:37.229363 7faa4ffdf700 20 Read xattr: user.rgw.manifest
2014-01-08 17:58:37.229366 7faa4ffdf700 10 moving .us-east-1.rgw+Test3 to cache LRU end
2014-01-08 17:58:37.229366 7faa4ffdf700 10 cache get: name=.us-east-1.rgw+Test3 : hit
2014-01-08 17:58:37.229374 7faa4ffdf700 20 rgw_get_bucket_info: bucket instance: Test3(@{i=.us-east-1.rgw.buckets.index}.us-east-1.rgw.buckets[east-1.8607.1])
2014-01-08 17:58:37.229379 7faa4ffdf700 20 reading from .us-east-1.rgw:.bucket.meta.Test3:east-1.8607.1
2014-01-08 17:58:37.229383 7faa4ffdf700 20 get_obj_state: rctx=0x7fa9b4000ee0 obj=.us-east-1.rgw:.bucket.meta.Test3:east-1.8607.1 state=0x7fa9b4006ff8 s->prefetch_data=0
2014-01-08 17:58:37.229388 7faa4ffdf700 10 moving .us-east-1.rgw+.bucket.meta.Test3:east-1.8607.1 to cache LRU end
2014-01-08 17:58:37.229389 7faa4ffdf700 10 cache get: name=.us-east-1.rgw+.bucket.meta.Test3:east-1.8607.1 : hit
2014-01-08 17:58:37.229394 7faa4ffdf700 20 get_obj_state: s->obj_tag was set empty
2014-01-08 17:58:37.229396 7faa4ffdf700 20 Read xattr: user.rgw.acl
2014-01-08 17:58:37.229397 7faa4ffdf700 20 Read xattr: user.rgw.idtag
2014-01-08 17:58:37.229397 7faa4ffdf700 20 Read xattr: user.rgw.manifest
2014-01-08 17:58:37.229399 7faa4ffdf700 10 moving .us-east-1.rgw+.bucket.meta.Test3:east-1.8607.1 to cache LRU end
2014-01-08 17:58:37.229400 7faa4ffdf700 10 cache get: name=.us-east-1.rgw+.bucket.meta.Test3:east-1.8607.1 : hit
2014-01-08 17:58:37.229423 7faa4ffdf700 15 Read AccessControlPolicy<AccessControlPolicy xmlns="http://s3.amazonaws.com/doc/2006-03-01/"><Owner><ID>app-ops</ID><DisplayName>Region-US Zone-East</DisplayName></Owner><AccessControlList><Grant><Grantee xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="CanonicalUser"><ID>jaseer</ID><DisplayName>Jaseer TK</DisplayName></Grantee><Permission>READ</Permission></Grant></AccessControlList></AccessControlPolicy>
2014-01-08 17:58:37.229436 7faa4ffdf700 15 Read AccessControlPolicy<AccessControlPolicy xmlns="http://s3.amazonaws.com/doc/2006-03-01/"><Owner><ID>app-ops</ID><DisplayName>Region-US Zone-East</DisplayName></Owner><AccessControlList><Grant><Grantee xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="CanonicalUser"><ID>jaseer</ID><DisplayName>Jaseer TK</DisplayName></Grantee><Permission>READ</Permission></Grant></AccessControlList></AccessControlPolicy>
2014-01-08 17:58:37.229441 7faa4ffdf700  2 req 21:0.000426:s3:GET /Test3:get_acls:init op
2014-01-08 17:58:37.229444 7faa4ffdf700  2 req 21:0.000429:s3:GET /Test3:get_acls:verifying op mask
2014-01-08 17:58:37.229446 7faa4ffdf700 20 required_mask= 1 user.op_mask=7
2014-01-08 17:58:37.229448 7faa4ffdf700  2 req 21:0.000432:s3:GET /Test3:get_acls:verifying op permissions
2014-01-08 17:58:37.229450 7faa4ffdf700  5 Searching permissions for uid=app-ops mask=52
2014-01-08 17:58:37.229452 7faa4ffdf700  5 Permissions for user not found
2014-01-08 17:58:37.229453 7faa4ffdf700  5 Searching permissions for group=1 mask=52
2014-01-08 17:58:37.229454 7faa4ffdf700  5 Permissions for group not found
2014-01-08 17:58:37.229455 7faa4ffdf700  5 Searching permissions for group=2 mask=52
2014-01-08 17:58:37.229456 7faa4ffdf700  5 Permissions for group not found
2014-01-08 17:58:37.229456 7faa4ffdf700  5 Getting permissions id=app-ops owner=app-ops perm=4
2014-01-08 17:58:37.229457 7faa4ffdf700 10  uid=app-ops requested perm (type)=4, policy perm=4, user_perm_mask=4, acl perm=4
2014-01-08 17:58:37.229459 7faa4ffdf700  2 req 21:0.000444:s3:GET /Test3:get_acls:verifying op params
2014-01-08 17:58:37.229460 7faa4ffdf700  2 req 21:0.000445:s3:GET /Test3:get_acls:executing
2014-01-08 17:58:37.229480 7faa4ffdf700  2 req 21:0.000465:s3:GET /Test3:get_acls:http status=200
2014-01-08 17:58:37.229658 7faa4ffdf700  1 ====== req done req=0x2182c90 http_status=200 ======


==============



Logs for putacl:
===============

2014-01-08 18:00:35.160860 7faae2d93780 20 enqueued request req=0x21829b0
2014-01-08 18:00:35.160884 7faae2d93780 20 RGWWQ:
2014-01-08 18:00:35.160887 7faae2d93780 20 req: 0x21829b0
2014-01-08 18:00:35.160956 7faae2d93780 10 allocated request req=0x2132c60
2014-01-08 18:00:35.161006 7faa67fff700 20 dequeued request req=0x21829b0
2014-01-08 18:00:35.161023 7faa67fff700 20 RGWWQ: empty
2014-01-08 18:00:35.161033 7faa67fff700  1 ====== starting new request req=0x21829b0 =====
2014-01-08 18:00:35.161114 7faa67fff700  2 req 22:0.000082::PUT /Test3::initializing
2014-01-08 18:00:35.161123 7faa67fff700 10 host=isp.inmobi.com rgw_dns_name=isp.inmobi.com
2014-01-08 18:00:35.161161 7faa67fff700 10 s->object=<NULL> s->bucket=Test3
2014-01-08 18:00:35.161174 7faa67fff700 20 FCGI_ROLE=RESPONDER
2014-01-08 18:00:35.161176 7faa67fff700 20 SCRIPT_URL=/Test3
2014-01-08 18:00:35.161177 7faa67fff700 20 SCRIPT_URI=http://isp.inmobi.com/Test3
2014-01-08 18:00:35.161177 7faa67fff700 20 HTTP_AUTHORIZATION=AWS RDDGMHRBXJN6HY3BOEO7:N0+TC4Kr2N45xKKxUZkCyHpgQ74=
2014-01-08 18:00:35.161178 7faa67fff700 20 HTTP_USER_AGENT=S3/php
2014-01-08 18:00:35.161179 7faa67fff700 20 HTTP_ACCEPT=*/*
2014-01-08 18:00:35.161179 7faa67fff700 20 HTTP_HOST=isp.inmobi.com
2014-01-08 18:00:35.161180 7faa67fff700 20 HTTP_DATE=Wed, 08 Jan 2014 18:00:34 GMT
2014-01-08 18:00:35.161181 7faa67fff700 20 CONTENT_TYPE=application/xml
2014-01-08 18:00:35.161181 7faa67fff700 20 CONTENT_LENGTH=447
2014-01-08 18:00:35.161182 7faa67fff700 20 PATH=/usr/local/bin:/usr/bin:/bin
2014-01-08 18:00:35.161183 7faa67fff700 20 SERVER_SIGNATURE=
2014-01-08 18:00:35.161183 7faa67fff700 20 SERVER_SOFTWARE=Apache/2.2.22 (Ubuntu)
2014-01-08 18:00:35.161184 7faa67fff700 20 SERVER_NAME=isp.inmobi.com
2014-01-08 18:00:35.161185 7faa67fff700 20 SERVER_ADDR=10.2.4.203
2014-01-08 18:00:35.161185 7faa67fff700 20 SERVER_PORT=80
2014-01-08 18:00:35.161186 7faa67fff700 20 REMOTE_ADDR=10.14.100.34
2014-01-08 18:00:35.161187 7faa67fff700 20 DOCUMENT_ROOT=/var/www
2014-01-08 18:00:35.161187 7faa67fff700 20 SERVER_ADMIN=app-ops@xxxxxxxxxx
2014-01-08 18:00:35.161188 7faa67fff700 20 SCRIPT_FILENAME=/var/www/s3gw.fcgi
2014-01-08 18:00:35.161188 7faa67fff700 20 REMOTE_PORT=50702
2014-01-08 18:00:35.161189 7faa67fff700 20 GATEWAY_INTERFACE=CGI/1.1
2014-01-08 18:00:35.161189 7faa67fff700 20 SERVER_PROTOCOL=HTTP/1.1
2014-01-08 18:00:35.161190 7faa67fff700 20 REQUEST_METHOD=PUT
2014-01-08 18:00:35.161190 7faa67fff700 20 QUERY_STRING=page=Test3&params=&acl
2014-01-08 18:00:35.161191 7faa67fff700 20 REQUEST_URI=/Test3?acl
2014-01-08 18:00:35.161191 7faa67fff700 20 SCRIPT_NAME=/Test3
2014-01-08 18:00:35.161192 7faa67fff700  2 req 22:0.000160:s3:PUT /Test3::getting op
2014-01-08 18:00:35.161195 7faa67fff700  2 req 22:0.000163:s3:PUT /Test3:put_acls:authorizing
2014-01-08 18:00:35.161214 7faa67fff700 20 get_obj_state: rctx=0x7faa20005110 obj=.us-east-1.users:RDDGMHRBXJN6HY3BOEO7 state=0x7faa200051d8 s->prefetch_data=0
2014-01-08 18:00:35.161224 7faa67fff700 10 moving .us-east-1.users+RDDGMHRBXJN6HY3BOEO7 to cache LRU end
2014-01-08 18:00:35.161227 7faa67fff700 10 cache get: name=.us-east-1.users+RDDGMHRBXJN6HY3BOEO7 : hit
2014-01-08 18:00:35.161233 7faa67fff700 20 get_obj_state: s->obj_tag was set empty
2014-01-08 18:00:35.161238 7faa67fff700 10 moving .us-east-1.users+RDDGMHRBXJN6HY3BOEO7 to cache LRU end
2014-01-08 18:00:35.161239 7faa67fff700 10 cache get: name=.us-east-1.users+RDDGMHRBXJN6HY3BOEO7 : hit
2014-01-08 18:00:35.161252 7faa67fff700 20 get_obj_state: rctx=0x7faa20005300 obj=.us-east-1.users.uid:app-ops state=0x7faa20005948 s->prefetch_data=0
2014-01-08 18:00:35.161260 7faa67fff700 10 moving .us-east-1.users.uid+app-ops to cache LRU end
2014-01-08 18:00:35.161262 7faa67fff700 10 cache get: name=.us-east-1.users.uid+app-ops : hit
2014-01-08 18:00:35.161265 7faa67fff700 20 get_obj_state: s->obj_tag was set empty
2014-01-08 18:00:35.161268 7faa67fff700 10 moving .us-east-1.users.uid+app-ops to cache LRU end
2014-01-08 18:00:35.161269 7faa67fff700 10 cache get: name=.us-east-1.users.uid+app-ops : hit
2014-01-08 18:00:35.161304 7faa67fff700 10 get_canon_resource(): dest=/Test3?acl
2014-01-08 18:00:35.161306 7faa67fff700 10 auth_hdr:
PUT

application/xml
Wed, 08 Jan 2014 18:00:34 GMT
/Test3?acl
2014-01-08 18:00:35.161373 7faa67fff700 15 calculated digest=N0+TC4Kr2N45xKKxUZkCyHpgQ74=
2014-01-08 18:00:35.161375 7faa67fff700 15 auth_sign=N0+TC4Kr2N45xKKxUZkCyHpgQ74=
2014-01-08 18:00:35.161376 7faa67fff700 15 compare=0
2014-01-08 18:00:35.161377 7faa67fff700 20 system request
2014-01-08 18:00:35.161381 7faa67fff700  2 req 22:0.000348:s3:PUT /Test3:put_acls:reading permissions
2014-01-08 18:00:35.161391 7faa67fff700 20 get_obj_state: rctx=0x7faa20000ee0 obj=.us-east-1.rgw:Test3 state=0x7faa20006a78 s->prefetch_data=0
2014-01-08 18:00:35.161397 7faa67fff700 10 moving .us-east-1.rgw+Test3 to cache LRU end
2014-01-08 18:00:35.161399 7faa67fff700 10 cache get: name=.us-east-1.rgw+Test3 : hit
2014-01-08 18:00:35.161403 7faa67fff700 20 get_obj_state: s->obj_tag was set empty
2014-01-08 18:00:35.161404 7faa67fff700 20 Read xattr: user.rgw.idtag
2014-01-08 18:00:35.161405 7faa67fff700 20 Read xattr: user.rgw.manifest
2014-01-08 18:00:35.161407 7faa67fff700 10 moving .us-east-1.rgw+Test3 to cache LRU end
2014-01-08 18:00:35.161408 7faa67fff700 10 cache get: name=.us-east-1.rgw+Test3 : hit
2014-01-08 18:00:35.161462 7faa67fff700 20 rgw_get_bucket_info: bucket instance: Test3(@{i=.us-east-1.rgw.buckets.index}.us-east-1.rgw.buckets[east-1.8607.1])
2014-01-08 18:00:35.161547 7faa67fff700 20 reading from .us-east-1.rgw:.bucket.meta.Test3:east-1.8607.1
2014-01-08 18:00:35.161551 7faa67fff700 20 get_obj_state: rctx=0x7faa20000ee0 obj=.us-east-1.rgw:.bucket.meta.Test3:east-1.8607.1 state=0x7faa200076f8 s->prefetch_data=0
2014-01-08 18:00:35.161557 7faa67fff700 10 moving .us-east-1.rgw+.bucket.meta.Test3:east-1.8607.1 to cache LRU end
2014-01-08 18:00:35.161559 7faa67fff700 10 cache get: name=.us-east-1.rgw+.bucket.meta.Test3:east-1.8607.1 : hit
2014-01-08 18:00:35.161564 7faa67fff700 20 get_obj_state: s->obj_tag was set empty
2014-01-08 18:00:35.161565 7faa67fff700 20 Read xattr: user.rgw.acl
2014-01-08 18:00:35.161567 7faa67fff700 20 Read xattr: user.rgw.idtag
2014-01-08 18:00:35.161568 7faa67fff700 20 Read xattr: user.rgw.manifest
2014-01-08 18:00:35.161570 7faa67fff700 10 moving .us-east-1.rgw+.bucket.meta.Test3:east-1.8607.1 to cache LRU end
2014-01-08 18:00:35.161572 7faa67fff700 10 cache get: name=.us-east-1.rgw+.bucket.meta.Test3:east-1.8607.1 : hit
2014-01-08 18:00:35.161592 7faa67fff700 15 Read AccessControlPolicy<AccessControlPolicy xmlns="http://s3.amazonaws.com/doc/2006-03-01/"><Owner><ID>app-ops</ID><DisplayName>Region-US Zone-East</DisplayName></Owner><AccessControlList><Grant><Grantee xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="CanonicalUser"><ID>jaseer</ID><DisplayName>Jaseer TK</DisplayName></Grantee><Permission>READ</Permission></Grant></AccessControlList></AccessControlPolicy>
2014-01-08 18:00:35.161604 7faa67fff700 15 Read AccessControlPolicy<AccessControlPolicy xmlns="http://s3.amazonaws.com/doc/2006-03-01/"><Owner><ID>app-ops</ID><DisplayName>Region-US Zone-East</DisplayName></Owner><AccessControlList><Grant><Grantee xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="CanonicalUser"><ID>jaseer</ID><DisplayName>Jaseer TK</DisplayName></Grantee><Permission>READ</Permission></Grant></AccessControlList></AccessControlPolicy>
2014-01-08 18:00:35.161610 7faa67fff700  2 req 22:0.000578:s3:PUT /Test3:put_acls:init op
2014-01-08 18:00:35.161613 7faa67fff700  2 req 22:0.000581:s3:PUT /Test3:put_acls:verifying op mask
2014-01-08 18:00:35.161615 7faa67fff700 20 required_mask= 2 user.op_mask=7
2014-01-08 18:00:35.161616 7faa67fff700  2 req 22:0.000584:s3:PUT /Test3:put_acls:verifying op permissions
2014-01-08 18:00:35.161619 7faa67fff700  5 Searching permissions for uid=app-ops mask=56
2014-01-08 18:00:35.161620 7faa67fff700  5 Permissions for user not found
2014-01-08 18:00:35.161621 7faa67fff700  5 Searching permissions for group=1 mask=56
2014-01-08 18:00:35.161622 7faa67fff700  5 Permissions for group not found
2014-01-08 18:00:35.161623 7faa67fff700  5 Searching permissions for group=2 mask=56
2014-01-08 18:00:35.161624 7faa67fff700  5 Permissions for group not found
2014-01-08 18:00:35.161625 7faa67fff700  5 Getting permissions id=app-ops owner=app-ops perm=8
2014-01-08 18:00:35.161626 7faa67fff700 10  uid=app-ops requested perm (type)=8, policy perm=8, user_perm_mask=8, acl perm=8
2014-01-08 18:00:35.161627 7faa67fff700  2 req 22:0.000595:s3:PUT /Test3:put_acls:verifying op params
2014-01-08 18:00:35.161629 7faa67fff700  2 req 22:0.000597:s3:PUT /Test3:put_acls:executing
2014-01-08 18:00:35.161641 7faa67fff700 15 read len=447 data="" version="1.0"?>
<AccessControlPolicy>
  <Owner>
    <ID>app-ops</ID>
    <DisplayName>Region-US Zone-East</DisplayName>
  </Owner>
  <AccessControlList>
    <Grant>
      <Grantee xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="CanonicalUser">
        <ID>jaseer</ID>
        <DisplayName>Jaseer TK</DisplayName>
      </Grantee>
      <Permission>READ</Permission>
    </Grant>
  </AccessControlList>
</AccessControlPolicy>

2014-01-08 18:00:35.161701 7faa67fff700 15 Old AccessControlPolicy<AccessControlPolicy xmlns="http://s3.amazonaws.com/doc/2006-03-01/"><Owner><ID>app-ops</ID><DisplayName>Region-US Zone-East</DisplayName></Owner><AccessControlList><Grant><Grantee xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="CanonicalUser"><ID>jaseer</ID><DisplayName>Jaseer TK</DisplayName></Grantee><Permission>READ</Permission></Grant></AccessControlList></AccessControlPolicy>
2014-01-08 18:00:35.161712 7faa67fff700 20 get_obj_state: rctx=0x7faa2000d9b0 obj=.us-east-1.users.uid:app-ops state=0x7faa2000dd68 s->prefetch_data=0
2014-01-08 18:00:35.161718 7faa67fff700 10 moving .us-east-1.users.uid+app-ops to cache LRU end
2014-01-08 18:00:35.161723 7faa67fff700 10 cache get: name=.us-east-1.users.uid+app-ops : hit
2014-01-08 18:00:35.161726 7faa67fff700 20 get_obj_state: s->obj_tag was set empty
2014-01-08 18:00:35.161730 7faa67fff700 10 moving .us-east-1.users.uid+app-ops to cache LRU end
2014-01-08 18:00:35.161731 7faa67fff700 10 cache get: name=.us-east-1.users.uid+app-ops : hit
2014-01-08 18:00:35.161744 7faa67fff700 20 owner id=app-ops
2014-01-08 18:00:35.161746 7faa67fff700 20 dest owner id=app-ops
2014-01-08 18:00:35.161750 7faa67fff700 20 get_obj_state: rctx=0x7faa2000e1a0 obj=.us-east-1.users.uid:jaseer state=0x7faa2000e668 s->prefetch_data=0
2014-01-08 18:00:35.161755 7faa67fff700 10 moving .us-east-1.users.uid+jaseer to cache LRU end
2014-01-08 18:00:35.161756 7faa67fff700 10 cache get: name=.us-east-1.users.uid+jaseer : hit
2014-01-08 18:00:35.161759 7faa67fff700 20 get_obj_state: s->obj_tag was set empty
2014-01-08 18:00:35.161762 7faa67fff700 10 moving .us-east-1.users.uid+jaseer to cache LRU end
2014-01-08 18:00:35.161763 7faa67fff700 10 cache get: name=.us-east-1.users.uid+jaseer : hit
2014-01-08 18:00:35.161771 7faa67fff700 10 new grant: jaseer:Jaseer TK
2014-01-08 18:00:35.161775 7faa67fff700 15 New AccessControlPolicy:<AccessControlPolicy xmlns="http://s3.amazonaws.com/doc/2006-03-01/"><Owner><ID>app-ops</ID><DisplayName>Region-US Zone-East</DisplayName></Owner><AccessControlList><Grant><Grantee xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="CanonicalUser"><ID>jaseer</ID><DisplayName>Jaseer TK</DisplayName></Grantee><Permission>READ</Permission></Grant></AccessControlList></AccessControlPolicy>
2014-01-08 18:00:35.161873 7faa67fff700  1 -- 10.2.4.203:0/1004169 --> 10.2.4.203:6855/22095 -- osd_op(client.8604.0:1243 .bucket.meta.Test3:east-1.8607.1 [call version.check_conds,call version.set,setxattr user.rgw.acl (150)] 16.7d61d036 e567) v4 -- ?+0 0x7faa2000fd30 con 0x7faabc032950
2014-01-08 18:00:35.190879 7faad8d3c700  1 -- 10.2.4.203:0/1004169 <== osd.56 10.2.4.203:6855/22095 1 ==== osd_op_reply(1243 .bucket.meta.Test3:east-1.8607.1 [call,call,setxattr (150)] v567'4 uv4 _ondisk_ = 0) v6 ==== 275+0+0 (1563155070 0 0) 0x7fa9d0000fa0 con 0x7faabc032950
2014-01-08 18:00:35.191067 7faa67fff700 10 cache put: name=.us-east-1.rgw+.bucket.meta.Test3:east-1.8607.1
2014-01-08 18:00:35.191104 7faa67fff700 10 moving .us-east-1.rgw+.bucket.meta.Test3:east-1.8607.1 to cache LRU end
2014-01-08 18:00:35.191108 7faa67fff700 10 appending xattr: name=user.rgw.acl bl.length()=150
2014-01-08 18:00:35.191132 7faa67fff700 10 distributing notification oid=notify.5 bl.length()=458
2014-01-08 18:00:35.191206 7faa67fff700  1 -- 10.2.4.203:0/1004169 --> 10.2.4.90:6826/28037 -- osd_op(client.8604.0:1244 notify.5 [notify 13~0] 5.31099063 e567) v4 -- ?+0 0x7faa2000f900 con 0x2191210
2014-01-08 18:00:35.192695 7faad8d3c700  1 -- 10.2.4.203:0/1004169 <== osd.10 10.2.4.90:6826/28037 100 ==== watch-notify(c=6 v=1 i=2435246456858 opcode=1) v1 ==== 488+0+0 (3994886606 0 0) 0x7faa8000bf30 con 0x2191210
2014-01-08 18:00:35.192919 7faad1ffb700 10 RGWWatcher::notify() opcode=1 ver=1 bl.length()=458
2014-01-08 18:00:35.193030 7faad1ffb700 10 cache put: name=.us-east-1.rgw+.bucket.meta.Test3:east-1.8607.1
2014-01-08 18:00:35.193037 7faad1ffb700 10 moving .us-east-1.rgw+.bucket.meta.Test3:east-1.8607.1 to cache LRU end
2014-01-08 18:00:35.193041 7faad1ffb700 10 appending xattr: name=user.rgw.acl bl.length()=150
2014-01-08 18:00:35.193103 7faad1ffb700  1 -- 10.2.4.203:0/1004169 --> 10.2.4.90:6826/28037 -- osd_op(client.8604.0:1245 notify.5 [notify-ack 2435246456858~1] 5.31099063 e567) v4 -- ?+0 0x7faa840048d0 con 0x2191210
2014-01-08 18:00:35.193114 7faad8d3c700  1 -- 10.2.4.203:0/1004169 <== osd.10 10.2.4.90:6826/28037 101 ==== osd_op_reply(1244 notify.5 [notify 13~0] v0'0 uv1 _ondisk_ = 0) v6 ==== 167+0+0 (1829242010 0 0) 0x7faa8001db70 con 0x2191210
2014-01-08 18:00:35.194590 7faad8d3c700  1 -- 10.2.4.203:0/1004169 <== osd.10 10.2.4.90:6826/28037 102 ==== osd_op_reply(1245 notify.5 [notify-ack 2435246456858~1] v0'0 uv1 _ondisk_ = 0) v6 ==== 167+0+0 (2561335616 0 0) 0x7faa8001db70 con 0x2191210
2014-01-08 18:00:35.194931 7faad8d3c700  1 -- 10.2.4.203:0/1004169 <== osd.10 10.2.4.90:6826/28037 103 ==== watch-notify(c=13 v=1 i=2435246456858 opcode=1) v1 ==== 488+0+0 (1666694009 0 0) 0x7faa8001db70 con 0x2191210
2014-01-08 18:00:35.195164 7faad1ffb700  1 -- 10.2.4.203:0/1004169 --> 10.2.4.90:6826/28037 -- osd_op(client.8604.0:1246 notify.5 [notify-ack 2435246456858~1] 5.31099063 e567) v4 -- ?+0 0x7faa840048d0 con 0x2191210
2014-01-08 18:00:35.195532 7faa67fff700  2 req 22:0.034499:s3:PUT /Test3:put_acls:http status=200
2014-01-08 18:00:35.195818 7faa67fff700  1 ====== req done req=0x21829b0 http_status=200 ======



=========================


Logs for s3 file deletion:

=======
2014-01-08 18:06:46.389380 7faae2d93780 20 enqueued request req=0x214c030
2014-01-08 18:06:46.389405 7faae2d93780 20 RGWWQ:
2014-01-08 18:06:46.389407 7faae2d93780 20 req: 0x214c030
2014-01-08 18:06:46.389473 7faae2d93780 10 allocated request req=0x217a960
2014-01-08 18:06:46.389529 7faa3c7b8700 20 dequeued request req=0x214c030
2014-01-08 18:06:46.389539 7faa3c7b8700 20 RGWWQ: empty
2014-01-08 18:06:46.389552 7faa3c7b8700  1 ====== starting new request req=0x214c030 =====
2014-01-08 18:06:46.389615 7faa3c7b8700  2 req 24:0.000064::DELETE /Test3/vip.txt::initializing
2014-01-08 18:06:46.389622 7faa3c7b8700 10 host=isp.inmobi.com rgw_dns_name=isp.inmobi.com
2014-01-08 18:06:46.389634 7faa3c7b8700 10 meta>> HTTP_X_AMZ_DATE
2014-01-08 18:06:46.389640 7faa3c7b8700 10 x>> x-amz-date:Wed, 08 Jan 2014 18:06:42 +0000
2014-01-08 18:06:46.389658 7faa3c7b8700 10 s->object=vip.txt s->bucket=Test3
2014-01-08 18:06:46.389665 7faa3c7b8700 20 FCGI_ROLE=RESPONDER
2014-01-08 18:06:46.389666 7faa3c7b8700 20 SCRIPT_URL=/Test3/vip.txt
2014-01-08 18:06:46.389667 7faa3c7b8700 20 SCRIPT_URI=http://isp.inmobi.com/Test3/vip.txt
2014-01-08 18:06:46.389668 7faa3c7b8700 20 HTTP_AUTHORIZATION=AWS TJA9G6SOY6VERRZ629JP:PEPnhNtMAMFcg6h+OYGArn+RMX8=
2014-01-08 18:06:46.389669 7faa3c7b8700 20 HTTP_HOST=isp.inmobi.com
2014-01-08 18:06:46.389670 7faa3c7b8700 20 HTTP_ACCEPT_ENCODING=identity
2014-01-08 18:06:46.389670 7faa3c7b8700 20 CONTENT_LENGTH=0
2014-01-08 18:06:46.389671 7faa3c7b8700 20 HTTP_X_AMZ_DATE=Wed, 08 Jan 2014 18:06:42 +0000
2014-01-08 18:06:46.389672 7faa3c7b8700 20 PATH=/usr/local/bin:/usr/bin:/bin
2014-01-08 18:06:46.389672 7faa3c7b8700 20 SERVER_SIGNATURE=
2014-01-08 18:06:46.389673 7faa3c7b8700 20 SERVER_SOFTWARE=Apache/2.2.22 (Ubuntu)
2014-01-08 18:06:46.389673 7faa3c7b8700 20 SERVER_NAME=isp.inmobi.com
2014-01-08 18:06:46.389674 7faa3c7b8700 20 SERVER_ADDR=10.2.4.203
2014-01-08 18:06:46.389674 7faa3c7b8700 20 SERVER_PORT=80
2014-01-08 18:06:46.389675 7faa3c7b8700 20 REMOTE_ADDR=10.14.118.100
2014-01-08 18:06:46.389675 7faa3c7b8700 20 DOCUMENT_ROOT=/var/www
2014-01-08 18:06:46.389676 7faa3c7b8700 20 SERVER_ADMIN=app-ops@xxxxxxxxxx
2014-01-08 18:06:46.389676 7faa3c7b8700 20 SCRIPT_FILENAME=/var/www/s3gw.fcgi
2014-01-08 18:06:46.389677 7faa3c7b8700 20 REMOTE_PORT=33904
2014-01-08 18:06:46.389678 7faa3c7b8700 20 GATEWAY_INTERFACE=CGI/1.1
2014-01-08 18:06:46.389679 7faa3c7b8700 20 SERVER_PROTOCOL=HTTP/1.1
2014-01-08 18:06:46.389680 7faa3c7b8700 20 REQUEST_METHOD=DELETE
2014-01-08 18:06:46.389681 7faa3c7b8700 20 QUERY_STRING=page=Test3&params=/vip.txt
2014-01-08 18:06:46.389681 7faa3c7b8700 20 REQUEST_URI=/Test3/vip.txt
2014-01-08 18:06:46.389682 7faa3c7b8700 20 SCRIPT_NAME=/Test3/vip.txt
2014-01-08 18:06:46.389683 7faa3c7b8700  2 req 24:0.000132:s3:DELETE /Test3/vip.txt::getting op
2014-01-08 18:06:46.389686 7faa3c7b8700  2 req 24:0.000135:s3:DELETE /Test3/vip.txt:delete_obj:authorizing
2014-01-08 18:06:46.389708 7faa3c7b8700 20 get_obj_state: rctx=0x7faa8c004b70 obj=.us-east-1.users:TJA9G6SOY6VERRZ629JP state=0x7faa8c004c38 s->prefetch_data=0
2014-01-08 18:06:46.389719 7faa3c7b8700 10 moving .us-east-1.users+TJA9G6SOY6VERRZ629JP to cache LRU end
2014-01-08 18:06:46.389722 7faa3c7b8700 10 cache get: name=.us-east-1.users+TJA9G6SOY6VERRZ629JP : hit
2014-01-08 18:06:46.389731 7faa3c7b8700 20 get_obj_state: s->obj_tag was set empty
2014-01-08 18:06:46.389736 7faa3c7b8700 10 moving .us-east-1.users+TJA9G6SOY6VERRZ629JP to cache LRU end
2014-01-08 18:06:46.389737 7faa3c7b8700 10 cache get: name=.us-east-1.users+TJA9G6SOY6VERRZ629JP : hit
2014-01-08 18:06:46.389753 7faa3c7b8700 20 get_obj_state: rctx=0x7faa8c004d60 obj=.us-east-1.users.uid:jaseer state=0x7faa8c006b18 s->prefetch_data=0
2014-01-08 18:06:46.389758 7faa3c7b8700 10 moving .us-east-1.users.uid+jaseer to cache LRU end
2014-01-08 18:06:46.389760 7faa3c7b8700 10 cache get: name=.us-east-1.users.uid+jaseer : hit
2014-01-08 18:06:46.389763 7faa3c7b8700 20 get_obj_state: s->obj_tag was set empty
2014-01-08 18:06:46.389766 7faa3c7b8700 10 moving .us-east-1.users.uid+jaseer to cache LRU end
2014-01-08 18:06:46.389767 7faa3c7b8700 10 cache get: name=.us-east-1.users.uid+jaseer : hit
2014-01-08 18:06:46.389808 7faa3c7b8700 10 get_canon_resource(): dest=/Test3/vip.txt
2014-01-08 18:06:46.389811 7faa3c7b8700 10 auth_hdr:
DELETE



x-amz-date:Wed, 08 Jan 2014 18:06:42 +0000
/Test3/vip.txt
2014-01-08 18:06:46.389885 7faa3c7b8700 15 calculated digest=PEPnhNtMAMFcg6h+OYGArn+RMX8=
2014-01-08 18:06:46.389887 7faa3c7b8700 15 auth_sign=PEPnhNtMAMFcg6h+OYGArn+RMX8=
2014-01-08 18:06:46.389888 7faa3c7b8700 15 compare=0
2014-01-08 18:06:46.389890 7faa3c7b8700 20 system request
2014-01-08 18:06:46.389892 7faa3c7b8700  2 req 24:0.000341:s3:DELETE /Test3/vip.txt:delete_obj:reading permissions
2014-01-08 18:06:46.389904 7faa3c7b8700 20 get_obj_state: rctx=0x7faa8c000fe0 obj=.us-east-1.rgw:Test3 state=0x7faa8c005c98 s->prefetch_data=0
2014-01-08 18:06:46.389911 7faa3c7b8700 10 moving .us-east-1.rgw+Test3 to cache LRU end
2014-01-08 18:06:46.389912 7faa3c7b8700 10 cache get: name=.us-east-1.rgw+Test3 : hit
2014-01-08 18:06:46.389917 7faa3c7b8700 20 get_obj_state: s->obj_tag was set empty
2014-01-08 18:06:46.389920 7faa3c7b8700 20 Read xattr: user.rgw.idtag
2014-01-08 18:06:46.389921 7faa3c7b8700 20 Read xattr: user.rgw.manifest
2014-01-08 18:06:46.389924 7faa3c7b8700 10 moving .us-east-1.rgw+Test3 to cache LRU end
2014-01-08 18:06:46.389925 7faa3c7b8700 10 cache get: name=.us-east-1.rgw+Test3 : hit
2014-01-08 18:06:46.389934 7faa3c7b8700 20 rgw_get_bucket_info: bucket instance: Test3(@{i=.us-east-1.rgw.buckets.index}.us-east-1.rgw.buckets[east-1.8607.1])
2014-01-08 18:06:46.389939 7faa3c7b8700 20 reading from .us-east-1.rgw:.bucket.meta.Test3:east-1.8607.1
2014-01-08 18:06:46.389944 7faa3c7b8700 20 get_obj_state: rctx=0x7faa8c000fe0 obj=.us-east-1.rgw:.bucket.meta.Test3:east-1.8607.1 state=0x7faa8c00a5e8 s->prefetch_data=0
2014-01-08 18:06:46.389949 7faa3c7b8700 10 moving .us-east-1.rgw+.bucket.meta.Test3:east-1.8607.1 to cache LRU end
2014-01-08 18:06:46.389950 7faa3c7b8700 10 cache get: name=.us-east-1.rgw+.bucket.meta.Test3:east-1.8607.1 : hit
2014-01-08 18:06:46.389955 7faa3c7b8700 20 get_obj_state: s->obj_tag was set empty
2014-01-08 18:06:46.389956 7faa3c7b8700 20 Read xattr: user.rgw.acl
2014-01-08 18:06:46.389957 7faa3c7b8700 20 Read xattr: user.rgw.idtag
2014-01-08 18:06:46.389958 7faa3c7b8700 20 Read xattr: user.rgw.manifest
2014-01-08 18:06:46.389961 7faa3c7b8700 10 moving .us-east-1.rgw+.bucket.meta.Test3:east-1.8607.1 to cache LRU end
2014-01-08 18:06:46.389963 7faa3c7b8700 10 cache get: name=.us-east-1.rgw+.bucket.meta.Test3:east-1.8607.1 : hit
2014-01-08 18:06:46.389980 7faa3c7b8700 15 Read AccessControlPolicy<AccessControlPolicy xmlns="http://s3.amazonaws.com/doc/2006-03-01/"><Owner><ID>app-ops</ID><DisplayName>Region-US Zone-East</DisplayName></Owner><AccessControlList><Grant><Grantee xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="CanonicalUser"><ID>jaseer</ID><DisplayName>Jaseer TK</DisplayName></Grantee><Permission>READ</Permission></Grant></AccessControlList></AccessControlPolicy>
2014-01-08 18:06:46.389988 7faa3c7b8700  2 req 24:0.000437:s3:DELETE /Test3/vip.txt:delete_obj:init op
2014-01-08 18:06:46.389992 7faa3c7b8700  2 req 24:0.000440:s3:DELETE /Test3/vip.txt:delete_obj:verifying op mask
2014-01-08 18:06:46.389993 7faa3c7b8700 20 required_mask= 4 user.op_mask=7
2014-01-08 18:06:46.389994 7faa3c7b8700  2 req 24:0.000443:s3:DELETE /Test3/vip.txt:delete_obj:verifying op permissions
2014-01-08 18:06:46.389997 7faa3c7b8700  5 Searching permissions for uid=jaseer mask=50
2014-01-08 18:06:46.389999 7faa3c7b8700  5 Found permission: 1
2014-01-08 18:06:46.390000 7faa3c7b8700  5 Searching permissions for group=1 mask=50
2014-01-08 18:06:46.390001 7faa3c7b8700  5 Permissions for group not found
2014-01-08 18:06:46.390002 7faa3c7b8700  5 Searching permissions for group=2 mask=50
2014-01-08 18:06:46.390003 7faa3c7b8700  5 Permissions for group not found
2014-01-08 18:06:46.390003 7faa3c7b8700  5 Getting permissions id=jaseer owner=app-ops perm=0
2014-01-08 18:06:46.390004 7faa3c7b8700 10  uid=jaseer requested perm (type)=2, policy perm=0, user_perm_mask=2, acl perm=0
2014-01-08 18:06:46.390006 7faa3c7b8700  2 overriding permissions due to system operation
2014-01-08 18:06:46.390007 7faa3c7b8700  2 req 24:0.000456:s3:DELETE /Test3/vip.txt:delete_obj:verifying op params
2014-01-08 18:06:46.390008 7faa3c7b8700  2 req 24:0.000457:s3:DELETE /Test3/vip.txt:delete_obj:executing
2014-01-08 18:06:46.390017 7faa3c7b8700 20 get_obj_state: rctx=0x7faa8c000fe0 obj=Test3:vip.txt state=0x7faa8c008078 s->prefetch_data=0
2014-01-08 18:06:46.390068 7faa3c7b8700  1 -- 10.2.4.203:0/1004169 --> 10.2.4.203:6865/22234 -- osd_op(client.8604.0:1248 east-1.8607.1_vip.txt [getxattrs,stat] 8.eb952482 e567) v4 -- ?+0 0x7faa8c008eb0 con 0x7faabc043070
2014-01-08 18:06:46.392062 7faad8d3c700  1 -- 10.2.4.203:0/1004169 <== osd.54 10.2.4.203:6865/22234 1 ==== osd_op_reply(1248 east-1.8607.1_vip.txt [getxattrs,stat] v0'0 uv59 _ondisk_ = 0) v6 ==== 222+0+807 (325389612 0 3984178414) 0x7faa18001a30 con 0x7faabc043070
2014-01-08 18:06:46.392290 7faa3c7b8700 10 manifest: total_size = 1621
2014-01-08 18:06:46.392305 7faa3c7b8700 10 manifest: ofs=0 loc=Test3:vip.txt
2014-01-08 18:06:46.392308 7faa3c7b8700 20 get_obj_state: setting s->obj_tag to east-1.8607.1055
2014-01-08 18:06:46.392352 7faa3c7b8700 10 setting object write_tag=_I_fXnf11cDCPWJ0oFS5dVwsVgDFziHe
2014-01-08 18:06:46.392413 7faa3c7b8700  1 -- 10.2.4.203:0/1004169 --> 10.2.4.203:6845/21995 -- osd_op(client.8604.0:1249 .dir.east-1.8607.1 [call rgw.bucket_prepare_op] 7.8e7e5c51 e567) v4 -- ?+0 0x7faa8c00b300 con 0x7faabc036150
2014-01-08 18:06:46.436377 7faad8d3c700  1 -- 10.2.4.203:0/1004169 <== osd.58 10.2.4.203:6845/21995 2 ==== osd_op_reply(1249 .dir.east-1.8607.1 [call] v567'10 uv10 _ondisk_ = 0) v6 ==== 177+0+0 (779774278 0 0) 0x7faa2000edb0 con 0x7faabc036150
2014-01-08 18:06:46.436616 7faa3c7b8700  1 -- 10.2.4.203:0/1004169 --> 10.2.4.203:6865/22234 -- osd_op(client.8604.0:1250 east-1.8607.1_vip.txt [cmpxattr user.rgw.idtag (17) op 1 mode 1,setxattr user.rgw.idtag (33),call refcount.put] 8.eb952482 e567) v4 -- ?+0 0x7faa8c009d50 con 0x7faabc043070
2014-01-08 18:06:46.463235 7faad8d3c700  1 -- 10.2.4.203:0/1004169 <== osd.54 10.2.4.203:6865/22234 2 ==== osd_op_reply(1250 east-1.8607.1_vip.txt [cmpxattr (17) op 1 mode 1,setxattr (33),call] v567'60 uv60 _ondisk_ = 0) v6 ==== 264+0+0 (530216734 0 0) 0x7faa18001440 con 0x7faabc043070
2014-01-08 18:06:46.463488 7faa3c7b8700  1 -- 10.2.4.203:0/1004169 --> 10.2.4.203:6845/21995 -- osd_op(client.8604.0:1251 .dir.east-1.8607.1 [call rgw.bucket_complete_op] 7.8e7e5c51 e567) v4 -- ?+0 0x7faa8c00b300 con 0x7faabc036150
2014-01-08 18:06:46.463677 7faa3c7b8700  1 -- 10.2.4.203:0/1004169 --> 10.2.4.90:6895/359 -- osd_op(client.8604.0:1252 gc.7 [call rgw.gc_set_entry] 6.21d2251d e567) v4 -- ?+0 0x7faa8c00f2c0 con 0x7faabc033610
2014-01-08 18:06:46.463730 7faa3c7b8700  2 req 24:0.074179:s3:DELETE /Test3/vip.txt:delete_obj:http status=204
2014-01-08 18:06:46.463954 7faa3c7b8700  1 ====== req done req=0x214c030 http_status=204 ======
=================



Thank you,
Jaseer TK


On Wed, Jan 8, 2014 at 11:13 PM, Yehuda Sadeh <yehuda@xxxxxxxxxxx> wrote:
On Wed, Jan 8, 2014 at 9:40 AM, Jaseer Tk <jaseer.tk@xxxxxxxxxx> wrote:
>
> Thanks Yehuda,
>
> But I am seeing only this much in the logs with the log options we set. I'll
> try once again and update you.

There should be much more.

>
> Do you think any global parameter (like region/zone settings or user's
> privileges ) could be causing these buckets to be writable all users ?
>

At the moment it looks like all users are actually mapping to the same
user, or something along that line. It is not highly unlikely that
misconfiguration caused it.

Yehuda


> Thank you,
> Jaseer TK
>
>
>
>
>
> On Wed, Jan 8, 2014 at 10:27 PM, Yehuda Sadeh <yehuda@xxxxxxxxxxx> wrote:
>>
>> On Tue, Jan 7, 2014 at 11:16 PM, Jaseer Tk <jaseer.tk@xxxxxxxxxx> wrote:
>> >
>> > Hi Yehuda,
>> >
>> > Thanks for response.
>> >
>> > my setup is on ubuntu 12.04 servers, ceph pkg's:
>> >
>> > ========
>> > ii  ceph                             0.72.2-1precise
>> > distributed storage and file system
>> > ii  ceph-common                      0.72.2-1precise
>> > common utilities to mount and interact with a ceph storage cluster
>> > ii  ceph-fs-common                   0.72.2-1precise
>> > common utilities to mount and interact with a ceph file system
>> > ii  ceph-mds                         0.72.2-1precise
>> > metadata server for the ceph distributed file system
>> > ==========
>> >
>> > rados version:
>> > =====
>> > ii  librados2                        0.72.2-1precise
>> > RADOS distributed object store client library
>> > ii  radosgw                          0.72.2-1precise
>> > REST gateway for RADOS distributed object store
>> > ii  radosgw-agent                    1.1-1precise
>> > =======
>> >
>> >
>> > rados conf:
>> >
>> > [client.radosgw.us-east-1]
>> >     rgw region = us
>> >     rgw region root pool = .us.rgw.root
>> >     rgw zone = east-1
>> >     rgw zone root pool = .us-east-1.rgw.root
>> >     keyring = /etc/ceph/ceph.client.radosgw.keyring
>> >     debug rgw = 20
>> >     debug ms = 1
>> >     rgw_dns_name = my_domain
>> >     rgw socket path = /var/run/ceph/client.radosgw.us-east-1.sock
>> >     log file = /var/log/ceph/radosgw.log
>> >     host = my_rados_hostname
>> >
>> >
>> > Logs while doing putacl,
>> > =========
>> > 2014-01-08 07:01:00.364967 7f0180f5d700 10 RGWWatcher::notify() opcode=1
>> > ver=1 bl.length()=462
>> > 2014-01-08 07:01:00.365006 7f0180f5d700 10 cache put:
>> > name=.us-east-1.rgw+.bucket.meta.App-Ops:east-1.5350.1
>> > 2014-01-08 07:01:00.365013 7f0180f5d700 10 moving
>> > .us-east-1.rgw+.bucket.meta.App-Ops:east-1.5350.1 to cache LRU end
>> > 2014-01-08 07:01:00.365017 7f0180f5d700 10 appending xattr:
>> > name=user.rgw.acl bl.length()=150
>> > 2014-01-08 07:01:01.501663 7f016bfff700  2
>> > RGWDataChangesLog::ChangesRenewThread: start
>> > ==========
>>
>> These aren't very thorough logs, looks like a very small snippet. Is
>> that all you're getting?
>>
>>
>> >
>> > No rgw logs when doing s3cmd del.
>> >
>> > I am using http://undesigned.org.za/2007/10/22/amazon-s3-php-class/ with
>> > minor modifications to use with rados s3 interface.
>> > getacl  shows my acl is applied. But user is still able to delete.
>> > Please
>> > let me know if you want me to share my php code for getacl and putacl.
>> >
>> >
>> >
>> >
>> > --
>> > Thank you,
>> > Jaseer TK
>> >
>> >
>> >
>> >
>> >
>> >
>> >
>> >
>> > On Tue, Jan 7, 2014 at 9:30 PM, Yehuda Sadeh <yehuda@xxxxxxxxxxx> wrote:
>> >>
>> >> On Tue, Jan 7, 2014 at 2:40 AM, Jaseer Tk <jaseer.tk@xxxxxxxxxx> wrote:
>> >> >
>> >> > Hi all,
>> >> >
>> >> > I tried to apply custom ACL(only Read) on an s3 bucket created. The
>> >> > rules
>> >> > seems to have got applied. But it looks the ACL's not getting
>> >> > honored.
>> >> >
>> >> > when I use getacl, I get the result.
>> >> > =======
>> >> >
>> >> > Array
>> >> > (
>> >> >     [0] => Array
>> >> >         (
>> >> >             [Grantee] => Array
>> >> >                 (
>> >> >                     [ID] => test-user
>> >> >                     [DisplayName] => Test User
>> >> >                 )
>> >> >
>> >> >             [Permission] => READ
>> >> >         )
>> >> >
>> >> > )
>> >> >
>> >> >
>> >> > But Still this user is able to delete files from the bucket :(
>> >> >
>> >> > Am I missing something here ?
>> >> >
>> >> >
>> >> What version are you running? Just tried it with dumpling and it
>> >> worked ok. Can you provide rgw logs for it? (acl setting + removal;
>> >> set 'debug rgw = 20' and 'debug ms = 1').
>> >>
>> >> Thanks,
>> >> Yehuda
>> >
>> >
>> >
>> > _____________________________________________________________
>> > The information contained in this communication is intended solely for
>> > the
>> > use of the individual or entity to whom it is addressed and others
>> > authorized to receive it. It may contain confidential or legally
>> > privileged
>> > information. If you are not the intended recipient you are hereby
>> > notified
>> > that any disclosure, copying, distribution or taking any action in
>> > reliance
>> > on the contents of this information is strictly prohibited and may be
>> > unlawful. If you have received this communication in error, please
>> > notify us
>> > immediately by responding to this email and then delete it from your
>> > system.
>> > The firm is neither liable for the proper and complete transmission of
>> > the
>> > information contained in this communication nor for any delay in its
>> > receipt.
>
>
>
> _____________________________________________________________
> The information contained in this communication is intended solely for the
> use of the individual or entity to whom it is addressed and others
> authorized to receive it. It may contain confidential or legally privileged
> information. If you are not the intended recipient you are hereby notified
> that any disclosure, copying, distribution or taking any action in reliance
> on the contents of this information is strictly prohibited and may be
> unlawful. If you have received this communication in error, please notify us
> immediately by responding to this email and then delete it from your system.
> The firm is neither liable for the proper and complete transmission of the
> information contained in this communication nor for any delay in its
> receipt.


_____________________________________________________________
The information contained in this communication is intended solely for the use of the individual or entity to whom it is addressed and others authorized to receive it. It may contain confidential or legally privileged information. If you are not the intended recipient you are hereby notified that any disclosure, copying, distribution or taking any action in reliance on the contents of this information is strictly prohibited and may be unlawful. If you have received this communication in error, please notify us immediately by responding to this email and then delete it from your system. The firm is neither liable for the proper and complete transmission of the information contained in this communication nor for any delay in its receipt.
_______________________________________________
ceph-users mailing list
ceph-users@xxxxxxxxxxxxxx
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
[Index of Archives]     [Information on CEPH]     [Linux Filesystem Development]     [Ceph Development]     [Ceph Large]     [Linux USB Development]     [Video for Linux]     [Linux Audio Users]     [Yosemite News]     [Linux Kernel]     [Linux SCSI]     [xfs]

  Powered by Linux