Hi, And that fixed the problem :) Huge thanks, -Mika On Wed, Dec 23, 2020 at 12:05 PM Kiefer Chang <kiefer.chang@xxxxxxxx> wrote: > Hi Mika, > > Could you see if making the `test` user a system user works? > > The user that the Dashboard uses to communicate with RGW needs to be a > system user. > The document suggests a `--system` flag should be provided when creating > the user: > > https://docs.ceph.com/en/latest/mgr/dashboard/#enabling-the-object-gateway-management-frontend > > ``` > radosgw-admin user create --uid=<user_id> --display-name=<display_name> \ > --system > ``` > > I think you can use `radosgw-admin user modify ...` command to modify the > existing user. > > -- > Kiefer > > > > > On 2020/12/22, 10:56 PM, "Mika Saari" <mika.saari@xxxxxxxxx> wrote: > > Hi, > > Using Ceph Octopus installed with cephadm here. Version running currently > is 15.2.6. There are 3 machines running the cluster. Machine names are > introduced in /etc/hosts in long(FQDN) & short forms but ceph hostnames of > the servers are in short form (not sure if this affects anyway). rdb side > is working nicely, tested with a linux client. > > Trying to get object gateway to be visible in dashboard but getting error > when selecting "Object Gateway -> Daemons" > Error: > RGW REST API failed request with status code 403 > > (b'{"Code":"AccessDenied","RequestId":"tx000000000000000000040-005fe20384-8ecbc' > b'-ou","HostId":"8ecbc-ou-default"}') > > What am I doing wrong here? > > Thanks a lot, > -Mika > > ---- Procedure what I have done ---- > 1) ceph orch apply rgw default ou --placement="1 ceph1" > 2) radosgw-admin user create --uid=test --display-name=test > --access-key=test --secret-key=test > 3) radosgw-admin period update --rgw-realm=default --commit > 4) aws configure --profile=default > aws configure --profile=default > AWS Access Key ID [None]: test > AWS Secret Access Key [None]: test > Default region name [None]: default > Default output format [None]: json > 5) aws s3 mb s3://test1 --endpoint-url http://ceph1 > make_bucket: test1 > 5.1) radosgw-admin bucket list > [ > "test1" > ] > 6) ceph dashboard --help | grep reset-rgw | awk '{print $2}' | xargs -n > 1 ceph dashboard > Option RGW_API_ACCESS_KEY reset to default value "" > Option RGW_API_ADMIN_RESOURCE reset to default value "admin" > Option RGW_API_HOST reset to default value "" > Option RGW_API_PORT reset to default value "80" > Option RGW_API_SCHEME reset to default value "http" > Option RGW_API_SECRET_KEY reset to default value "" > Option RGW_API_SSL_VERIFY reset to default value "True" > Option RGW_API_USER_ID reset to default value "" > 7) ceph dashboard set-rgw-api-user-id "test" > Option RGW_API_USER_ID updated > 8) ceph dashboard set-rgw-api-access-key test > Option RGW_API_ACCESS_KEY updated > 9) ceph dashboard set-rgw-api-secret-key test > Option RGW_API_SECRET_KEY updated > 10) ceph mgr module disable dashboard > 11) ceph mgr module enable dashboard > _______________________________________________ > ceph-users mailing list -- ceph-users@xxxxxxx > To unsubscribe send an email to ceph-users-leave@xxxxxxx > > > _______________________________________________ ceph-users mailing list -- ceph-users@xxxxxxx To unsubscribe send an email to ceph-users-leave@xxxxxxx