Re: Swift APIs not authenticating Rados gateway !!!

[Srinivasa Rao Ragolu <sragolu@xxxxxxxxxx>]

Hi Larry and Yehuda,

Feeling happy that my Rados gateway working fine.
I have done 3 mistakes

1) hostname is used instead of {fqdn}
2) radosgw keyring is generated only "+r" instead of "rw"
3) same keyring should be copied to all cluster nodes
4) run radosgw manually

thanks for support

Srinivas

On Feb 26, 2014 7:18 PM, "Liu, Larry" <Larry.Liu@xxxxxxxxxx> wrote:

All my ceph servers(3 nodes) are running ubuntu 13.04(Raring) which was recommended by ceph & inktank. I didn't do anything special except following ceph.com's documentation carefully.

Swift client pkg, yes, apt-get install.

From: Srinivasa Rao Ragolu <sragolu@xxxxxxxxxx>
Date: Tuesday, February 25, 2014 10:17 PM
To: Microsoft Office User <Larry.Liu@xxxxxxxxxx>
Cc: Yehuda Sadeh <yehuda@xxxxxxxxxxx>, "ceph-users@xxxxxxxxxxxxxx" <ceph-users@xxxxxxxxxxxxxx>
Subject: Re: Swift APIs not authenticating Rados gateway !!!

Hi Larry,

As you suggested I have changed to Ubuntu 10.04. Still I could not able to figure out what is this problem. I skipped only two sections in ceph documentation is 1) SSL 2) DNS , as I thought not needed any security to my gateway.

1) I strongly have a doubt in specifying hostname in ceph.conf, rgw.conf. Kindly share those files with me of your working setup.

2) How did you configure https link for rados gateway?

3) I have installed swift with sudo apt-get install swift. Is it ok?

Will be very thankful to you

Srinivas.

On Sat, Feb 22, 2014 at 3:03 AM, Liu, Larry <Larry.Liu@xxxxxxxxxx> wrote:

Srinivasa, I pretty much think your problem is your fedora systems are missing some right lib files. I just got s3 working on my ubuntu raring setup. Just follow exactly what is written on http://ceph.com/docs/master/install/install-ceph-gateway/ .   Still a question to everyone else:  for swift API, what is the auth url?  The command swift –A xxxxxxxx already works fine for me.  Can't fine the swift auth url on the doc site.

From: Srinivasa Rao Ragolu <sragolu@xxxxxxxxxx>
Date: Thursday, February 20, 2014 10:05 PM
To: Microsoft Office User <Larry.Liu@xxxxxxxxxx>
Cc: Yehuda Sadeh <yehuda@xxxxxxxxxxx>, "ceph-users@xxxxxxxxxxxxxx" <ceph-users@xxxxxxxxxxxxxx>
Subject: Re: Swift APIs not authenticating Rados gateway !!!

Please help in making it easy Rados gateway configurable with Swift. It would be great support from you.

I have skipped only two sections in http://ceph.com/docs/master/install/install-ceph-gateway/

a) Enable SSL and b) Add wildcard to DNS

Apart from these steps I have followed all other instruction on fedora 19..Please go through the attached configuration files.

Still getting Authorisation failed : Http error 404

Please help me.

Srinivas.

 

On Fri, Feb 21, 2014 at 1:06 AM, Liu, Larry <Larry.Liu@xxxxxxxxxx> wrote:

Hi Yehuda,

Is there any doc on how to set the swift url (rgw swift url) configurable?

On 2/19/14 7:42 AM, "Yehuda Sadeh" <yehuda@xxxxxxxxxxx> wrote:

>On Wed, Feb 19, 2014 at 2:37 AM, Srinivasa Rao Ragolu
><sragolu@xxxxxxxxxx> wrote:
>> Hi all,
>>
>> I have setup cluster successfully and one node using to setup rados
>>gateway.
>> Machine is Fedora 19(all nodes)
>>
>> Steps I followed
>>
>> 1) Installed httpd, mod_fastcgi, ceph and ceph-radosgw using link
>> http://ceph.com/docs/master/install/install-ceph-gateway/
>>
>> Note : Did not follow "Enable SSL" and "Add wild card DNS" sections
>> 2) Made modifications in /etc/httpd/conf/httpd.conf,
>> /etc/httpd/conf.d/fastcgi.conf
>>
>> 3) Created rgw.conf in /etc/httpd/conf.d/
>>
>> 4) Followed the link
>> http://linuxmanpages.net/manpages/fedora19/man8/radosgw.8.html to create
>> rgw.conf.
>>
>> 5) Added radosgw section in /etc/ceph/ceph.conf
>>
>> 6) Please see httpd.conf, fastcgi.conf, rgw.conf and ceph.conf as
>> attachments.
>>
>> 7) Now followed below steps
>>
>>     a)
>>
>>        corresponding radosgw script (/var/www/s3gw.fcgi):
>>
>>        #!/bin/sh
>>        exec /usr/bin/radosgw -c /etc/ceph/ceph.conf -n
>> client.radosgw.gateway
>>
>>
>>     Gave execute permissions to s3gw.fcgi
>>
>>
>>
>>    b)
>>       ceph-authtool -C -n client.radosgw.gateway --gen-key
>> /etc/ceph/keyring.radosgw.gateway
>>        ceph-authtool -n client.radosgw.gateway --cap mon 'allow r'
>>--cap osd
>> 'allow rwx' /etc/ceph/keyring.radosgw.gateway
>> ceph auth add client.radosgw.gateway --in-file=keyring.radosgw.gateway
>>
>>
>>
>> 8) sudo service ceph restart
>>
>>    sudo service httpd restart
>>
>>    sudo /usr/bin/radosgw -c /etc/ceph/ceph.conf -n client.rados.gateway
>>
>> 9)  From the link http://ceph.com/docs/next/radosgw/config/, I executed
>> "Create a gateway user", "Enabling swift access" sections
>>
>> 10) After above all steps if I run swift commands, I got following error
>>
>> [gateway@gateway ceph]$ swift --verbose --debug -V 1.0 -A
>> http://radosgw.example.com/auth -U gateway:swift -K
>> "UoK\/XsR4zenFnq4z1sLIt6qSb7uPREfIEHtTG4JW" post test
>> ERROR:swiftclient:[Errno -2] Name or service not known
>> Traceback (most recent call last):
>>   File "/usr/lib/python2.7/site-packages/swiftclient/client.py", line
>>1101,
>> in _retry
>>     self.url, self.token = self.get_auth()
>>   File "/usr/lib/python2.7/site-packages/swiftclient/client.py", line
>>1076,
>> in get_auth
>>     insecure=self.insecure)
>>   File "/usr/lib/python2.7/site-packages/swiftclient/client.py", line
>>270,
>> in get_auth
>>     kwargs.get('snet'))
>>   File "/usr/lib/python2.7/site-packages/swiftclient/client.py", line
>>182,
>> in get_auth_1_0
>>     {'X-Auth-User': user, 'X-Auth-Key': key})
>>   File "/usr/lib/python2.7/site-packages/swiftclient/client.py", line
>>165,
>> in request_escaped
>>     func(method, url, body=body, headers=headers or {})
>>   File "/usr/lib64/python2.7/httplib.py", line 973, in request
>>     self._send_request(method, url, body, headers)
>>   File "/usr/lib64/python2.7/httplib.py", line 1007, in _send_request
>>     self.endheaders(body)
>>   File "/usr/lib64/python2.7/httplib.py", line 969, in endheaders
>>     self._send_output(message_body)
>>   File "/usr/lib64/python2.7/httplib.py", line 829, in _send_output
>>     self.send(msg)
>>   File "/usr/lib64/python2.7/httplib.py", line 791, in send
>>     self.connect()
>>   File "/usr/lib64/python2.7/httplib.py", line 772, in connect
>>     self.timeout, self.source_address)
>>   File "/usr/lib64/python2.7/socket.py", line 553, in create_connection
>>     for res in getaddrinfo(host, port, 0, SOCK_STREAM):
>> gaierror: [Errno -2] Name or service not known
>> [Errno -2] Name or service not known
>>
>>
>
>You also need to set the swift url (rgw swift url) configurable.
>Assuming you're not really using the example.com domain in your actual
>environment.
>
>Yehuda

>_______________________________________________
>ceph-users mailing list
>ceph-users@xxxxxxxxxxxxxx
>http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com

_______________________________________________
ceph-users mailing list
ceph-users@xxxxxxxxxxxxxx
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com