openstack team mailing list archive

[Morten Møller Riis <mmr@xxxxxxxxxxx>]

I use swauth, and thus authtoken is not present in my pipeline. This might be why I'm seeing the problem actually.

Mvh / Best regards
Morten Møller Riis
Gigahost ApS
mmr@xxxxxxxxxxx




On Jul 11, 2013, at 4:04 AM, Shrinand Javadekar <shrinand@xxxxxxxxxxxxxx> wrote:

> I had a similar problem. See [1]. The fix was to add delay_auth_decision = 1 in the proxy-server.conf
> 
> [filter:authtoken]
> ...
> delay_auth_decision = 1
> 
> -Shri
> [1] https://answers.launchpad.net/swift/+question/225614
> 
> 
> On Wed, Jul 10, 2013 at 4:43 AM, Morten Møller Riis <mmr@xxxxxxxxxxx> wrote:
> I've been looking at tempurl.py and found that the problem occurs here:
> 
>     def _get_key(self, env, account):
>         """
>         Returns the X-Account-Meta-Temp-URL-Key header value for the
>         account, or None if none is set.
> 
>         :param env: The WSGI environment for the request.
>         :param account: Account str.
>         :returns: X-Account-Meta-Temp-URL-Key str value, or None.
>         """
>         key = None
>         memcache = env.get('swift.cache')
>         if memcache:
>             key = memcache.get('temp-url-key/%s' % account)
>         if not key:
>             newenv = make_pre_authed_env(env, 'HEAD', '/v1/' + account,
>                                          self.agent)
>             newenv['CONTENT_LENGTH'] = '0'
>             newenv['wsgi.input'] = StringIO('')
>             key = [None]
> 
>             def _start_response(status, response_headers, exc_info=None):
>                 for h, v in response_headers:
>                     if h.lower() == 'x-account-meta-temp-url-key':
>                         key[0] = v
> 
>             i = iter(self.app(newenv, _start_response))
>             self.logger.info()
>             try:
>                 i.next()
>             except StopIteration:
>                 pass
>             key = key[0]
>             if key and memcache:
>                 memcache.set('temp-url-key/%s' % account, key, timeout=60)
>         return key
> 
> The request get 403 forbidden and thus never gets the key in the first place. I'm looking at the github repo and the implementation there seems to have changed.
> 
> 
> Mvh / Best regards
> Morten Møller Riis
> Gigahost ApS
> mmr@xxxxxxxxxxx
> 
> 
> 
> 
> On Jul 10, 2013, at 6:24 PM, Morten Møller Riis <mmr@xxxxxxxxxxx> wrote:
> 
>> I'm having trouble getting tempurl to work.
>> 
>> I set the "X-Account-Meta-Temp-Url-Key" metadata on the account. And a GET request shows it's set correctly.
>> 
>> I've enabled it on the proxy server in /etc/swift/proxy-server.conf:
>> 
>> [DEFAULT]
>> bind_port = 8080
>> workers = 8
>> user = swift
>> 
>> [pipeline:main]
>> pipeline = healthcheck cache tempurl swauth proxy-server
>> 
>> [app:proxy-server]
>> use = egg:swift#proxy
>> allow_account_management = true
>> account_autocreate = true
>> 
>> [filter:tempurl]
>> use = egg:swift#tempurl
>> 
>> [filter:swauth]
>> use = egg:swauth#swauth
>> set log_name = swauth
>> super_admin_key = <removed>
>> default_swift_cluster = gigahost#https://<url>/v1#http://localhost:8080/v1
>> 
>> [filter:healthcheck]
>> use = egg:swift#healthcheck
>> 
>> [filter:cache]
>> use = egg:swift#memcache
>> memcache_servers = 127.0.0.1:11211
>> 
>> When creating the tempurl's, even using the swift-temp-url program I get:
>> 
>> ~ $ curl -i "https://<url>/v1/AUTH_224b1001-2c75-444c-aaef-30af13b9154c/000/206.pdf?temp_url_sig=387d79120a591e1cf6f4d4356f5c0a96fb49d202&temp_url_expires=1373438360"
>> HTTP/1.1 401 Unauthorized
>> Server: nginx
>> Date: Wed, 10 Jul 2013 08:21:32 GMT
>> Content-Type: text/plain
>> Content-Length: 35
>> Connection: keep-alive
>> 
>> 401 Unauthorized: Temp URL invalid
>> 
>> I've even tried running it locally on the proxy-server to localhost:8080, so I'm sure it's not nginx doing any funny stuff.
>> 
>> Does anybody have any suggestions? I'm pretty lost :(
>> 
>> 
>> Mvh / Best regards
>> Morten Møller Riis
>> Gigahost ApS
>> mmr@xxxxxxxxxxx
>> 
>> 
>> 
>> 
>> _______________________________________________
>> Mailing list: https://launchpad.net/~openstack
>> Post to     : openstack@xxxxxxxxxxxxxxxxxxx
>> Unsubscribe : https://launchpad.net/~openstack
>> More help   : https://help.launchpad.net/ListHelp
> 
> 
> _______________________________________________
> Mailing list: https://launchpad.net/~openstack
> Post to     : openstack@xxxxxxxxxxxxxxxxxxx
> Unsubscribe : https://launchpad.net/~openstack
> More help   : https://help.launchpad.net/ListHelp
> 
>