search

cyberark / cyberark-conjur-cli-docker-based

CyberArk Conjur command line interface (Ruby)
https://rubygems.org/gems/conjur-cli
Apache License 2.0
14 stars 12 forks source link

[dalek] group:members:add results in HTTP 411 #43

Closed kgilpin closed 10 years ago

kgilpin commented 10 years ago 
$ RESTCLIENT_LOG=stderr conjur group:members:add demo/developers "user:alice@demo"
RestClient.post "https://ec2-54-81-242-78.compute-1.amazonaws.com/api/authn/users/admin/authenticate", "<snip>", "Accept"=>"*/*; q=0.5, application/xml", "Accept-Encoding"=>"gzip, deflate", "Content-Length"=>"53", "Content-Type"=>"text/plain"
# => 200 OK | application/json 494 bytes
RestClient.get "https://ec2-54-81-242-78.compute-1.amazonaws.com/api/info", "Accept"=>"*/*; q=0.5, application/xml", "Accept-Encoding"=>"gzip, deflate"
# => 200 OK | application/json 17 bytes
RestClient.put "https://ec2-54-81-242-78.compute-1.amazonaws.com/api/authz/grt/roles/group/demo/developers/?members&member=user:alice@demo", "Accept"=>"*/*; q=0.5, application/xml", "Accept-Encoding"=>"gzip, deflate", "Authorization"=>"Token token=\"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\""
# => 411 LengthRequired | text/html 180 bytes
<html>
<head><title>411 Length Required</title></head>
<body bgcolor="white">
<center><h1>411 Length Required</h1></center>
<hr><center>nginx/1.2.9</center>
</body>
</html>
error: 411 Length Required
kgilpin commented 10 years ago

Performing this command with role:grant_to works; the PUT request includes an empty body which allows the command to work

wm164-1b7:grt kgilpin$ conjur role:grant_to group:demo/developers user:alice@demo
Role granted
wm164-1b7:grt kgilpin$ RESTCLIENT_LOG=stderr conjur role:grant_to group:demo/developers user:alice@demo
RestClient.post "https://ec2-54-81-242-78.compute-1.amazonaws.com/api/authn/users/admin/authenticate", "3rxcty66ywvnjp82n993m76hf61swpft22srqt0w5y7mmf3vck3s6", "Accept"=>"*/*; q=0.5, application/xml", "Accept-Encoding"=>"gzip, deflate", "Content-Length"=>"53", "Content-Type"=>"text/plain"
# => 200 OK | application/json 494 bytes
RestClient.get "https://ec2-54-81-242-78.compute-1.amazonaws.com/api/info", "Accept"=>"*/*; q=0.5, application/xml", "Accept-Encoding"=>"gzip, deflate"
# => 200 OK | application/json 17 bytes
RestClient.put "https://ec2-54-81-242-78.compute-1.amazonaws.com/api/authz/grt/roles/group/demo/developers/?members&member=user:alice@demo", "", "Accept"=>"*/*; q=0.5, application/xml", "Accept-Encoding"=>"gzip, deflate", "Authorization"=>"Token token=\"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\"", "Content-Length"=>"0", "Content-Type"=>"application/x-www-form-urlencoded"
# => 200 OK | text/html 20 bytes
Role granted
jjmason commented 10 years ago

Appears to have been fixed a while back with changes to nginx appliance.

kgilpin commented 10 years ago

Appliance bug. Fixed. By the way it was a regression.