Skip to content

Commit 311b1a1

Browse files
authored
Merge pull request #190805 from yashluna/patch-31
Update secure-file-transfer-protocol-known-issues.md
2 parents c6a7dc5 + 066de7c commit 311b1a1

File tree

1 file changed

+13
-27
lines changed

1 file changed

+13
-27
lines changed

articles/storage/blobs/secure-file-transfer-protocol-known-issues.md

Lines changed: 13 additions & 27 deletions
Original file line numberDiff line numberDiff line change
@@ -22,18 +22,18 @@ This article describes limitations and known issues of SFTP support for Azure Bl
2222
>
2323
> To enroll in the preview, complete [this form](https://forms.office.com/r/gZguN0j65Y) AND request to join via 'Preview features' in Azure portal.
2424
25-
## Authorization
25+
## Authentication and authorization
2626

27-
- Local users are the only form of identity management that is currently supported for the SFTP endpoint.
27+
- _Local users_ is the only form of identity management that is currently supported for the SFTP endpoint.
2828

29-
- Azure Active Directory (Azure AD), shared access signature (SAS) and account key authorization are not supported for the SFTP endpoint.
29+
- Azure Active Directory (Azure AD) is not supported for the SFTP endpoint.
3030

3131
- POSIX-like access control lists (ACLs) are not supported for the SFTP endpoint.
3232

3333
> [!NOTE]
3434
> After your data is ingested into Azure Storage, you can use the full breadth of Azure storage security settings. While authorization mechanisms such as role-based access control (RBAC) and access control lists aren't supported as a means to authorize a connecting SFTP client, they can be used to authorize access via Azure tools (such Azure portal, Azure CLI, Azure PowerShell commands, and AzCopy) as well as Azure SDKS, and Azure REST APIs.
3535
36-
- Account level operations such as listing, putting/getting, creating/deleting containers are not supported.
36+
- Account and container level operations are not supported for the SFTP endpoint.
3737

3838
## Networking
3939

@@ -43,23 +43,11 @@ This article describes limitations and known issues of SFTP support for Azure Bl
4343

4444
## Security
4545

46-
- Host keys are published [here](secure-file-transfer-protocol-host-keys.md). During the public preview, host keys will rotate up to once per month.
47-
48-
- There a few different reasons for "remote host identification has changed" warning:
49-
50-
- The remote host key was updated (host keys are periodically rotated).
51-
52-
- The client selected a different host key algorithm than the one stored in the local ssh "known_hosts" file. OpenSSH will use an already trusted key if the host (account.blob.core.windows.net) matches, even when the algorithm doesn't necessarily match.
53-
54-
- The storage account failed over to a different region.
55-
56-
- The remote host (account.blob.core.windows.net) is being faked.
46+
- Host keys are published [here](secure-file-transfer-protocol-host-keys.md). During the public preview, host keys may rotate frequently.
5747

5848
## Integrations
5949

60-
- Change feed is not supported.
61-
62-
- Account metrics such as transactions and capacity are available. Filter logs by operations to see SFTP activity.
50+
- Change feed and Event Grid notifications are not supported.
6351

6452
- Network File System (NFS) 3.0 and SFTP can't be enabled on the same storage account.
6553

@@ -75,16 +63,12 @@ This article describes limitations and known issues of SFTP support for Azure Bl
7563

7664
- There's a 4 minute timeout for idle or inactive connections. OpenSSH will appear to stop responding and then disconnect. Some clients reconnect automatically.
7765

78-
- Maximum file size upload is limited by client message size. A few examples below:
79-
80-
- 32KB message (OpenSSH default) * 50k blocks = 1.52GB
81-
82-
- 100KB message (OpenSSH Windows max) * 50k blocks = 4.77GB
83-
84-
- 256KB message (OpenSSH Linux max) * 50k blocks = 12.20GB
66+
- Maximum file upload size is 90 GB.
8567

8668
## Other
8769

70+
- Special containers such as $logs, $blobchangefeed, $root, $web are not accessible via the SFTP endpoint.
71+
8872
- Symbolic links are not supported.
8973

9074
- `ssh-keyscan` is not supported.
@@ -105,10 +89,12 @@ This article describes limitations and known issues of SFTP support for Azure Bl
10589

10690
- The user has been assigned appropriate permissions to the container.
10791

108-
- The container name is specified in the connection string if you have not configured (set home directory) and provisioned (create the directory inside the container) a home directory for the user.
92+
- The container name is specified in the connection string for local users don't have a home directory.
93+
94+
- The container name is specified in the connection string for local users that have a home directory that doesn't exist.
10995

11096
## See also
11197

11298
- [SSH File Transfer Protocol (SFTP) support for Azure Blob Storage](secure-file-transfer-protocol-support.md)
11399
- [Connect to Azure Blob Storage by using the SSH File Transfer Protocol (SFTP)](secure-file-transfer-protocol-support-how-to.md)
114-
- [Host keys for SSH File Transfer Protocol (SFTP) support for Azure Blob Storage](secure-file-transfer-protocol-host-keys.md)
100+
- [Host keys for SSH File Transfer Protocol (SFTP) support for Azure Blob Storage](secure-file-transfer-protocol-host-keys.md)

0 commit comments

Comments
 (0)