From f1407efb903bbb264a68ed962086194feaed0b44 Mon Sep 17 00:00:00 2001 From: Pritha Srivastava Date: Thu, 11 Mar 2021 18:27:45 +0530 Subject: [PATCH] rgw/sts: fixes getsessiontoken authenticated with LDAP/Keystone, when object is uploaded via chunked encoding. fixes: https://tracker.ceph.com/issues/49797 Signed-off-by: Pritha Srivastava --- src/rgw/rgw_rest_s3.cc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/rgw/rgw_rest_s3.cc b/src/rgw/rgw_rest_s3.cc index 3cdf3afd5d2..a4db2df95a6 100644 --- a/src/rgw/rgw_rest_s3.cc +++ b/src/rgw/rgw_rest_s3.cc @@ -5930,7 +5930,7 @@ rgw::auth::s3::STSEngine::authenticate( if (token.acct_type == TYPE_KEYSTONE || token.acct_type == TYPE_LDAP) { auto apl = remote_apl_factory->create_apl_remote(cct, s, get_acl_strategy(), get_creds_info(token)); - return result_t::grant(std::move(apl), completer_factory(boost::none)); + return result_t::grant(std::move(apl), completer_factory(token.secret_access_key)); } else if (token.acct_type == TYPE_ROLE) { auto apl = role_apl_factory->create_apl_role(cct, s, r, user_id, token.policy, token.role_session, token.token_claims, token.issued_at); return result_t::grant(std::move(apl), completer_factory(token.secret_access_key)); -- 2.47.3