You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/storage/blobs/secure-file-transfer-protocol-known-issues.md
+13-27Lines changed: 13 additions & 27 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -22,18 +22,18 @@ This article describes limitations and known issues of SFTP support for Azure Bl
22
22
>
23
23
> To enroll in the preview, complete [this form](https://forms.office.com/r/gZguN0j65Y) AND request to join via 'Preview features' in Azure portal.
24
24
25
-
## Authorization
25
+
## Authentication and authorization
26
26
27
-
-Local users are the only form of identity management that is currently supported for the SFTP endpoint.
27
+
-_Local users_ is the only form of identity management that is currently supported for the SFTP endpoint.
28
28
29
-
- Azure Active Directory (Azure AD), shared access signature (SAS) and account key authorization are not supported for the SFTP endpoint.
29
+
- Azure Active Directory (Azure AD) is not supported for the SFTP endpoint.
30
30
31
31
- POSIX-like access control lists (ACLs) are not supported for the SFTP endpoint.
32
32
33
33
> [!NOTE]
34
34
> After your data is ingested into Azure Storage, you can use the full breadth of Azure storage security settings. While authorization mechanisms such as role-based access control (RBAC) and access control lists aren't supported as a means to authorize a connecting SFTP client, they can be used to authorize access via Azure tools (such Azure portal, Azure CLI, Azure PowerShell commands, and AzCopy) as well as Azure SDKS, and Azure REST APIs.
35
35
36
-
- Account level operations such as listing, putting/getting, creating/deleting containers are not supported.
36
+
- Account and container level operations are not supported for the SFTP endpoint.
37
37
38
38
## Networking
39
39
@@ -43,23 +43,11 @@ This article describes limitations and known issues of SFTP support for Azure Bl
43
43
44
44
## Security
45
45
46
-
- Host keys are published [here](secure-file-transfer-protocol-host-keys.md). During the public preview, host keys will rotate up to once per month.
47
-
48
-
- There a few different reasons for "remote host identification has changed" warning:
49
-
50
-
- The remote host key was updated (host keys are periodically rotated).
51
-
52
-
- The client selected a different host key algorithm than the one stored in the local ssh "known_hosts" file. OpenSSH will use an already trusted key if the host (account.blob.core.windows.net) matches, even when the algorithm doesn't necessarily match.
53
-
54
-
- The storage account failed over to a different region.
55
-
56
-
- The remote host (account.blob.core.windows.net) is being faked.
46
+
- Host keys are published [here](secure-file-transfer-protocol-host-keys.md). During the public preview, host keys may rotate frequently.
57
47
58
48
## Integrations
59
49
60
-
- Change feed is not supported.
61
-
62
-
- Account metrics such as transactions and capacity are available. Filter logs by operations to see SFTP activity.
50
+
- Change feed and Event Grid notifications are not supported.
63
51
64
52
- Network File System (NFS) 3.0 and SFTP can't be enabled on the same storage account.
65
53
@@ -75,16 +63,12 @@ This article describes limitations and known issues of SFTP support for Azure Bl
75
63
76
64
- There's a 4 minute timeout for idle or inactive connections. OpenSSH will appear to stop responding and then disconnect. Some clients reconnect automatically.
77
65
78
-
- Maximum file size upload is limited by client message size. A few examples below:
- Special containers such as $logs, $blobchangefeed, $root, $web are not accessible via the SFTP endpoint.
71
+
88
72
- Symbolic links are not supported.
89
73
90
74
-`ssh-keyscan` is not supported.
@@ -105,10 +89,12 @@ This article describes limitations and known issues of SFTP support for Azure Bl
105
89
106
90
- The user has been assigned appropriate permissions to the container.
107
91
108
-
- The container name is specified in the connection string if you have not configured (set home directory) and provisioned (create the directory inside the container) a home directory for the user.
92
+
- The container name is specified in the connection string for local users don't have a home directory.
93
+
94
+
- The container name is specified in the connection string for local users that have a home directory that doesn't exist.
109
95
110
96
## See also
111
97
112
98
-[SSH File Transfer Protocol (SFTP) support for Azure Blob Storage](secure-file-transfer-protocol-support.md)
113
99
-[Connect to Azure Blob Storage by using the SSH File Transfer Protocol (SFTP)](secure-file-transfer-protocol-support-how-to.md)
114
-
-[Host keys for SSH File Transfer Protocol (SFTP) support for Azure Blob Storage](secure-file-transfer-protocol-host-keys.md)
100
+
-[Host keys for SSH File Transfer Protocol (SFTP) support for Azure Blob Storage](secure-file-transfer-protocol-host-keys.md)
0 commit comments