Open Stack

Hello, everyone.

I have config a web server (tengine) as a proxy server for swift, and sent a GET request via a chrome browser in order to access swift container. From the log file, it can be seen that web server has pass the request to swift, but swift returns an unauthorized error. Log file record like this:

Access logs of tengine:

10.74.167.183 - - [17/Mar/2016:16:30:03 +0000] "GET /auth/v1.0 HTTP/1.1" 401 131 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.72 Safari/537.36" "-"
10.74.167.183 - - [17/Mar/2016:16:30:03 +0000] "GET /favicon.ico HTTP/1.1" 401 649 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.72 Safari/537.36" "-"

Proxy logs of swift:

Mar 17 15:12:27 localhost journal: proxy-logging 10.74.167.183 192.168.1.5 17/Mar/2016/15/12/27 GET /auth/v1.0 HTTP/1.0 401 - Mozilla/5.0%20%28Windows%20NT%206.1%3B%20WOW64%29%20AppleWebKit/537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome/28.0.1500.72%20Safari/537.36 - - 131 - tx21863381504d47098a73846d621fcbd0 - 0.0003 -
Mar 17 15:12:27 localhost journal: tempauth 10.74.167.183 192.168.1.5 17/Mar/2016/15/12/27 GET /auth/v1.0 HTTP/1.0 401 - Mozilla/5.0%20%28Windows%20NT%206.1%3B%20WOW64%29%20AppleWebKit/537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome/28.0.1500.72%20Safari/537.36 - - - - tx21863381504d47098a73846d621fcbd0 - 0.0013
~

According to these log files, I sort out the following table :

Access request of tengine:

remote_addr

-

remote_user

time_local

request

status

body_bytes_s ent

http_referer

http_user_agent

http_x_forwarded_for

　

10.74.167.183

-

-

[17/Mar/2016:15:12:23

GET /auth/v1.0 HTTP/1.1

401

131

-

Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.72 Safari/537.36

-

-

10.74.167.183

-

-

[17/Mar/2016:15:12:23

GET /favicon.ico HTTP/1.1

401

649

-

Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.72 Safari/537.36

-

-



Access request of swift:

client_ip

remote_addr

datetime

request_method

request_path

protocol

status_int

referer

 user_agent

 auth_token

bytes_recvd

  bytes_sent

client_etag

transaction_id

headers

request_time

source log_info

request_start_time

request_end_time

policy_index

10.74.167.183

192.168.1.5

17/Mar/2016/15/12/27

GET

/auth/v1.0

HTTP/1.0

401

-

Mozilla/5.0%20%28Windows%20NT%206.1%3B%20WOW64%29%20AppleWebKit/537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome/28.0.1500.72%20Safari/537.36

-

-

131

-

tx21863381504d47098a73846d621fcbd0

-

0.0003

-

　

　

　

10.74.167.183

192.168.1.5

17/Mar/2016/15/12/27

GET

/auth/v1.0

HTTP/1.0

401

-

Mozilla/5.0%20%28Windows%20NT%206.1%3B%20WOW64%29%20AppleWebKit/537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome/28.0.1500.72%20Safari/537.36

-

-

-

-

tx21863381504d47098a73846d621fcbd0

-

0.0013

　

　

　

　



What I can see is that user_agent cannot be identified by swift, spaces have became string “20%”.

So, is there any limit for swift to use? For example, can not recognize the GET request come from the browser.

Thanks for your time and hope to get your reply.

Amy


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20160317/34ec9241/attachment.html>