| *** DSLegends has quit IRC | 01:17 | |
| *** [-mugatu-] has quit IRC | 04:37 | |
| *** ionel has joined #swift3 | 05:45 | |
| *** ionel has left #swift3 | 05:46 | |
| *** nikivi has quit IRC | 06:26 | |
| *** openstackgerrit has quit IRC | 06:28 | |
| *** nikivi has joined #swift3 | 06:29 | |
| *** DSLegends has joined #swift3 | 12:59 | |
| *** NM has joined #swift3 | 13:40 | |
| *** acardoso has joined #swift3 | 14:07 | |
| *** tgk has joined #swift3 | 14:25 | |
| *** [-mugatu-] has joined #swift3 | 15:31 | |
| *** acardoso has quit IRC | 15:54 | |
| *** acardoso has joined #swift3 | 16:05 | |
| acardoso | Hello there! I’m having a bit of a problem with Swift3 and another authentication middleware we need to use here at my work. Currently the swift3/s3token authentication is returning 403, even with “delay_auth_decision = True”. The documentation states that “by default, s3token will reject all invalid s3-style requests”. How can I pass through s3token authentication, and get to my authentication middleware? | 16:32 |
|---|---|---|
| timburke | acardoso: just to be sure: this is s3token from the swift3 repo, yeah? previously, it lived in keystonemiddleware, python-keystoneclient, and i think even keystone itself | 16:40 |
| acardoso | Exactly | 16:40 |
| acardoso | My pipeline was: | 16:41 |
| acardoso | pipeline = healthcheck proxy-logging cache formpost bulk tempurl swift3 s3token authtoken accountsauth keystoneauth undelete slo metadata_enqueue proxy-logging proxy-server | 16:41 |
| acardoso | (the accountsauth is the middleware I need to use, after s3token ignores the requestada) | 16:41 |
| timburke | cool -- that pipeline looks good, though you may want to move authtoken in front of s3token following https://github.com/openstack/swift3/commit/6ffcc29 | 16:44 |
| timburke | is delay_auth_decision enabled for both s3token and authtoken? | 16:44 |
| acardoso | One sec | 16:44 |
| acardoso | It is | 16:45 |
| timburke | what swift3 version is it? then it's probably time to start digging through logs :-) | 16:45 |
| acardoso | I'll try to change the order of authtoken in the pipeline :) Will come back if I get any news! Thanks!! | 16:46 |
| timburke | ooo yeah... if it's pike keystone, the old order doesn't work, that's right :-( | 16:47 |
| timburke | (pike or later, i should say) | 16:47 |
| acardoso | And the swift3 version is 1.11.0 | 16:48 |
| acardoso | I'll sniff some more :) Thanks again! | 16:48 |
| timburke | ah! delay_auth_decision support for s3token came in https://github.com/openstack/swift3/commit/ca9d9d0 -- if you can get up to 1.12 (which was only *just* released, sorry, we really should have had a release earlier) i think you'll have better luck | 16:50 |
| acardoso | Excellent! Thanks SO MUCH! | 16:51 |
| timburke | happy to help :-) | 16:53 |
| *** NM has quit IRC | 18:00 | |
| *** NM has joined #swift3 | 18:02 | |
| *** [-mugatu-] is now known as shillo | 19:44 | |
| *** NM has quit IRC | 20:44 | |
| *** tgk has quit IRC | 21:25 | |
| *** CrustY_ has quit IRC | 22:18 | |
| *** _CrustY has joined #swift3 | 22:18 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!