registry team mailing list archive

[justinsb <607572@xxxxxxxxxxxxxxxxxx>]

Bug 607512 says you can make up Authentication headers without knowing the secret
Bug 607572 says that the compute node doesn't pass any header at all

I can work around the bug by passing use_s3=False to the compute node,
but long-term this isn't really an option...

** Summary changed:

- ObjectStore now checks security (Commit 146), compute node doesn't authenticate
+ ObjectStore now checks for presence of Authentication header (Commit 146), compute node doesn't pass Authentication header

** Summary changed:

- ObjectStore now checks for presence of Authentication header (Commit 146), compute node doesn't pass Authentication header
+ Compute node doesn't pass Authentication header, ObjectStore now checks for presence of Authentication header (Commit 146),

** Summary changed:

- Compute node doesn't pass Authentication header, ObjectStore now checks for presence of Authentication header (Commit 146),
+ Compute node doesn't pass Authentication header, but ObjectStore now checks for presence of Authentication header (Commit 146)

-- 
Compute node doesn't pass Authentication header, but ObjectStore now checks for presence of Authentication header (Commit 146)
https://bugs.launchpad.net/bugs/607572
You received this bug notification because you are a member of Registry
Administrators, which is subscribed to OpenStack.