Yehuda Sadeh
fc0d6d3453
docs: add keystone documentation
...
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-11-08 13:24:30 -08:00
Yehuda Sadeh
5fda39e6a3
rgw: change configurable
...
rgw keystone accepted roles
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-11-08 13:24:30 -08:00
Yehuda Sadeh
a99b0fac88
rgw: fix build
...
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-11-08 13:24:30 -08:00
Yehuda Sadeh
8fcd35185a
rgw: use a different boost thread library
...
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-11-08 13:24:29 -08:00
Yehuda Sadeh
ff8c2380b3
rgw: keystone tokens revocation thread
...
Use a thread to invalidate revoked tokens.
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-11-08 13:24:29 -08:00
Yehuda Sadeh
b69da4b8db
json_spirit: thread safe
...
apparently the library is not thread safe by default.
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-11-08 13:24:29 -08:00
Yehuda Sadeh
feb24afb63
rgw: decode pki tokens
...
If we can decode pki tokens then we don't need to send them to
the Keystone server for verification.
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-11-08 13:24:29 -08:00
Yehuda Sadeh
02c2c32dcf
rgw: invalidate revoked tokens
...
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-11-08 13:24:29 -08:00
Yehuda Sadeh
1f05b1af6e
rgw: keep pki tokens by hash
...
and also fix the token parsing (needed after the json
parser fix).
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-11-08 13:24:29 -08:00
Yehuda Sadeh
8249d7b3fb
rgw: decode revocation message
...
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-11-08 13:24:20 -08:00
Yehuda Sadeh
f7412fe37e
crypto: add cms utility function
...
Taken from a libnss tool (cmsutil), stripped code so that we
only get the decode functionality that we need.
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-11-02 13:13:38 -07:00
Yehuda Sadeh
29a03f0775
rgw: parse keystone token expiration
...
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-31 16:12:16 -07:00
Yehuda Sadeh
c62f3dd8c1
rgw: cache keystone tokens
...
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-31 14:49:12 -07:00
Yehuda Sadeh
f9443865ba
rgw: map keystone tenant id to rgw user
...
Instead of mapping the tenant name. Keep the name as the display_name.
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-31 11:23:28 -07:00
Yehuda Sadeh
88f482335d
rgw: handle keystone roles
...
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-30 17:34:06 -07:00
Yehuda Sadeh
421c352e33
rgw: auto create rgw user for new keystone users
...
We now also read the user info when authenticating the keystone
user.
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-30 16:38:54 -07:00
Yehuda Sadeh
845e862a71
rgw: handle keystone tokens
...
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-30 15:52:53 -07:00
Yehuda Sadeh
9df953cdd5
rgw: extend rgw json parser api
...
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-30 15:52:25 -07:00
Yehuda Sadeh
6d3cafcc50
rgw: refactor curl functionality
...
Move curl stuff into its own class, use it in swift token validation.
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-30 13:12:23 -07:00
Yehuda Sadeh
44818eb0ba
rgw: configurable swift auth url
...
This is relevant when using external swift v1 authentication. The
url was hard coded, now it's configurable.
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-30 12:39:29 -07:00
Yehuda Sadeh
bfc49049e3
rgw: better error responses, logging for specific error cases
...
Also, adjusting return values
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:44:23 -07:00
Yehuda Sadeh
30d11f424d
rgw: POST fixes, policy range, policy expiration
...
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:44:23 -07:00
caleb miles
7bb3504d3f
rgw: handle expiration and content length policy conditions.
...
Signed-off-by: caleb miles <caleb.miles@inktank.com>
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:44:18 -07:00
Yehuda Sadeh
ca1e1776fc
rgw: implement POST key can use ${filename}
...
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:43:09 -07:00
Yehuda Sadeh
d7b59429f2
rgw: return correct responses with POST
...
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:43:09 -07:00
Yehuda Sadeh
3faf6ab56d
rgw: handle success_action_redirect
...
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:43:09 -07:00
Yehuda Sadeh
846bb34335
rgw: handle policy as case insensitive where required
...
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:43:09 -07:00
Yehuda Sadeh
391775b78e
rgw: handle missing content length in POST
...
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:43:09 -07:00
Yehuda Sadeh
fc05b63472
rgw: handle x-ignore- in POST request
...
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:43:09 -07:00
Yehuda Sadeh
52b78d511b
rgw: verify that request variables are in policy
...
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:43:09 -07:00
Yehuda Sadeh
86b06f12a9
json_spirit: update grammar
...
Support a more relaxed grammar, where last entity in an array
or an object can have a comma trailing.
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:43:09 -07:00
Yehuda Sadeh
ccd757f019
rgw: add policy decoding code
...
merge in changes from commit 57668c14 by caleb
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:43:09 -07:00
Yehuda Sadeh
5b90d10bc2
rgw: basic policy functionality
...
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:43:09 -07:00
Yehuda Sadeh
81f257d583
rgw: add a test tool for json parser
...
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:43:09 -07:00
Yehuda Sadeh
c2b702fac7
rgw: adjustments for 100-continue
...
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:43:09 -07:00
Yehuda Sadeh
d6d3bf060e
rgw: handle content_type, meta
...
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:43:09 -07:00
Yehuda Sadeh
9f9bc77f34
rgw: helper functions to parse multipart form
...
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:43:09 -07:00
caleb miles
1bafe7cdbd
rgw: Create JSON parser
...
Create JSON object and parser classes similar to the XMLObj and
RGWXMLParser based on JSON Spirit.
Signed-off-by: caleb miles <caleb.miles@inktank.com>
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:42:50 -07:00
caleb miles
256bd62d21
rgw: Implement POST object to publicly writeable buckets.
...
The S3 API supports object upload using POST requests, for browser based
uploads, the specification is described at:
http://docs.amazonwebservices.com/AmazonS3/latest/API/RESTObjectPOST.html
In response to feature request 771:
http://tracker.newdream.net/issues/771
Signed-off-by: caleb miles <caleb.miles@inktank.com>
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:42:40 -07:00
Dan Mick
0ec45201f5
rbd: don't issue usage on errors
...
Change bare calls to usage() to an informative targeted error message
Remove all calls to usage() except when requested with -h/--help
Regularize all errors to start with rbd:
Remove a few commented cerrs, wrap cerr calls at 80 cols
Signed-off-by: Dan Mick <dan.mick@inktank.com>
Reviewed-by: Josh Durgin <josh.durgin@inktank.com>
2012-10-10 17:41:27 -07:00
John Wilkins
29bd476762
Merge branch 'master' of https://github.com/ceph/ceph
2012-10-10 15:16:17 -07:00
John Wilkins
7477a0812a
doc: Added radosgw temp remove.
...
fixes : #3278
Signed-off-by: John Wilkins <john.wilkins@inktank.com>
2012-10-10 15:15:32 -07:00
John Wilkins
041081caa8
doc: Minor clean-up.
...
Signed-off-by: John Wilkins <john.wilkins@inktank.com>
2012-10-10 15:14:05 -07:00
John Wilkins
94aec21f23
doc: minor clean-up.
...
Signed-off-by: John Wilkins <john.wilkins@inktank.com>
2012-10-10 15:13:41 -07:00
Noah Watkins
fc34f16af5
rgw: fix compilation
...
Signed-off-by: Noah Watkins <noahwatkins@gmail.com>
2012-10-10 15:00:03 -07:00
John Wilkins
c0f0317b77
Merge branch 'master' of https://github.com/ceph/ceph
...
Signed-off-by: John Wilkins <john.wilkins@inktank.com>
2012-10-10 14:38:50 -07:00
John Wilkins
8069aed993
Merge branch 'master' of https://github.com/ceph/ceph
2012-10-10 14:36:51 -07:00
John Wilkins
8f07729ad1
Merge branch 'wip-rbd-openstack-doc'
2012-10-10 14:36:13 -07:00
Sage Weil
15775f89c5
mon: drop command replies on paxos reset
...
If paxos resets, do not send the reply for the commit we were waiting for;
let the command be reprocessed and re-proposed.
Among other things, this could lead to nondeterministic results for
'ceph osd create <uuid>'.
Signed-off-by: Sage Weil <sage@inktank.com>
2012-10-10 14:19:58 -07:00
John Wilkins
06a8d9534d
doc: Editing and cleanup.
...
Signed-off-by: John Wilkins <john.wilkins@inktank.com>
2012-10-10 13:22:47 -07:00