get user list via rados-rest: {code: 403, message: Forbidden}

[Klaus Franken <klaus.franken@xxxxxxxx>]

Hi,

I’m trying to get a list of all users from the rados-rest-gateway analog to "radosgw-admin  metadata list user“.

I can retrieve a user info for a specified user from https://rgw01.XXX.de/admin/user?uid=klaus&format=json.
http://docs.ceph.com/docs/master/radosgw/adminops/#get-user-info say "If no user is specified returns the list of all users along with suspension information“.
But when using the same url without „uid=klaus“ I’m always get a {code: 403, message: Forbidden}. I tried to give the user all capabilities I found, but without success.

How can I get more debug messages (/var/log/ceph/radosgw.log wasn’t helpful even with a higher debug level)?
Or is that maybe a bug?


Successfull with uid=:
- request:
    body: null
    headers:
      Accept: ['*/*']
      Accept-Encoding: ['gzip, deflate']
      Authorization: ['AWS xxxx']
      Connection: [keep-alive]
      User-Agent: [python-requests/2.7.0 CPython/3.4.2 Darwin/14.5.0]
      date: ['Thu, 08 Oct 2015 09:12:14 GMT']
    method: GET
    uri: https://rgw01.XXX.de/admin/user?uid=klaus&format=json
  response:
    body: {string: '{"user_id":"klaus","display_name":"Klaus Franken","email":"","suspended":0,"max_buckets":1000,"subusers":[],"keys":[{"user":"klaus","access_key“:"yyyy","secret_key":"SpxxE\/zzzz"}],"swift_keys":[],"caps":[{"type":"buckets","perm":"*"},{"type":"metadata","perm":"*"},{"type":"usage","perm":"*"},{"type":"users","perm":"*"}]}'}
    headers:
      Connection: [close]
      Content-Type: [application/json]
      Date: ['Thu, 08 Oct 2015 09:12:14 GMT']
      Server: [Apache]
    status: {code: 200, message: OK}

403 withou uid=:
- request:
    body: null
    headers:
      Accept: ['*/*']
      Accept-Encoding: ['gzip, deflate']
      Authorization: ['AWS xxxx=']
      Connection: [keep-alive]
      User-Agent: [python-requests/2.7.0 CPython/3.4.2 Darwin/14.5.0]
      date: ['Thu, 08 Oct 2015 09:13:15 GMT']
    method: GET
    uri: https://rgw01.XXX.de/admin/user?format=json
  response:
    body: {string: '{"Code":"AccessDenied"}'}
    headers:
      Accept-Ranges: [bytes]
      Connection: [close]
      Content-Length: ['23']
      Content-Type: [application/json]
      Date: ['Thu, 08 Oct 2015 09:13:16 GMT']
      Server: [Apache]
    status: {code: 403, message: Forbidden}
version: 1


Thank you,
	Klaus


noris network AG - Thomas-Mann-Straße 16-20 - D-90471 Nürnberg -
Tel +49-911-9352-0 - Fax +49-911-9352-100

http://www.noris.de - The IT-Outsourcing Company

Vorstand: Ingo Kraupa (Vorsitzender), Joachim Astel -
Vorsitzender des Aufsichtsrats: Stefan Schnabel - AG Nürnberg HRB 17689

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
ceph-users mailing list
ceph-users@xxxxxxxxxxxxxx
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com