]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph.git/commit
projects / ceph.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 557bdb6) | patch
rgw: Bucket IP address policy evaluation now uses rgw_remote_addr_param.
authorJohn Gibson <jgibson@mitre.org>
Sun, 24 Dec 2017 20:49:50 +0000 (15:49 -0500)
committerJohn Gibson <jgibson@mitre.org>
Tue, 26 Dec 2017 21:59:09 +0000 (16:59 -0500)
commitc4c24ca986f17c68b75f76fc48ad489002fcf87e
tree933bf4c1fbf2cee5552dc73f69cd0dd8d6fed8a4tree | snapshot
parent557bdb617e6eb78f9f0e6d6ba35b79b318a6c275commit | diff
rgw: Bucket IP address policy evaluation now uses rgw_remote_addr_param.

Previously bucket policy ip address restrictions were only being evaluated
against the REMOTE_ADDR environment variable and ignoring the header
specified by the rgw_remote_addr_param configuration option. This rendered
ip-based bucket policies worthless when running behind a reverse proxy.

Signed-off-by: John Gibson <jgibson@mitre.org>
src/rgw/rgw_op.cc diff | blob | history
src/test/rgw/test_rgw_iam_policy.cc diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.