Skip to content

Commit 7946fa8

Browse files
committed
Some fixes
1 parent b6224d7 commit 7946fa8

File tree

2 files changed

+27
-29
lines changed

2 files changed

+27
-29
lines changed

articles/storage/blobs/secure-file-transfer-protocol-known-issues.md

Lines changed: 13 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ author: normesta
55
ms.subservice: blobs
66
ms.service: storage
77
ms.topic: conceptual
8-
ms.date: 03/04/2022
8+
ms.date: 06/03/2022
99
ms.author: normesta
1010
ms.reviewer: ylunagaria
1111

@@ -26,15 +26,11 @@ This article describes limitations and known issues of SFTP support for Azure Bl
2626

2727
The following clients are known to be incompatible with SFTP for Azure Blob Storage (preview). See [Supported algorithms](secure-file-transfer-protocol-support.md#supported-algorithms) for more information.
2828

29-
- Axway
3029
- Five9
3130
- Kemp
32-
- Moveit
3331
- Mule
3432
- paramiko 1.16.0
35-
- Salesforce
3633
- SSH.NET 2016.1.0
37-
- XFB.Gateway
3834

3935
> [!NOTE]
4036
> The unsupported client list above is not exhaustive and may change over time.
@@ -48,38 +44,36 @@ The following clients are known to be incompatible with SFTP for Azure Blob Stor
4844
| Random writes and appends | <li>Operations that include both READ and WRITE flags. For example: [SSH.NET create API](https://github.com/sshnet/SSH.NET/blob/develop/src/Renci.SshNet/SftpClient.cs#:~:text=public%20SftpFileStream-,Create,-(string%20path))<li>Operations that include APPEND flag. For example: [SSH.NET append API](https://github.com/sshnet/SSH.NET/blob/develop/src/Renci.SshNet/SftpClient.cs#:~:text=public%20void-,AppendAllLines,-(string%20path%2C%20IEnumerable%3Cstring%3E%20contents)). |
4945
| Links |<li>`symlink` - creating symbolic links<li>`ln` - creating hard links<li>Reading links not supported |
5046
| Capacity Information | `df` - usage info for filesystem |
51-
| Extensions | Unsupported extensions include but are not limited to: [email protected], [email protected], [email protected], [email protected] |
47+
| Extensions | Unsupported extensions include but aren't limited to: [email protected], [email protected], [email protected], [email protected] |
5248
| SSH Commands | SFTP is the only supported subsystem. Shell requests after the completion of the key exchange will fail. |
53-
| Multi-protocol writes | Random writes and appends (`PutBlock`,`PutBlockList`, `GetBlockList`, `AppendBlock`, `AppendFile`) are not allowed from other protocols on blobs that are created by using SFTP. Full overwrites are allowed.|
49+
| Multi-protocol writes | Random writes and appends (`PutBlock`,`PutBlockList`, `GetBlockList`, `AppendBlock`, `AppendFile`) aren't allowed from other protocols on blobs that are created by using SFTP. Full overwrites are allowed.|
5450

5551
## Authentication and authorization
5652

5753
- _Local users_ is the only form of identity management that is currently supported for the SFTP endpoint.
5854

59-
- Azure Active Directory (Azure AD) is not supported for the SFTP endpoint.
55+
- Azure Active Directory (Azure AD) isn't supported for the SFTP endpoint.
6056

61-
- POSIX-like access control lists (ACLs) are not supported for the SFTP endpoint.
57+
- POSIX-like access control lists (ACLs) aren't supported for the SFTP endpoint.
6258

6359
> [!NOTE]
6460
> After your data is ingested into Azure Storage, you can use the full breadth of Azure storage security settings. While authorization mechanisms such as role-based access control (RBAC) and access control lists aren't supported as a means to authorize a connecting SFTP client, they can be used to authorize access via Azure tools (such Azure portal, Azure CLI, Azure PowerShell commands, and AzCopy) as well as Azure SDKS, and Azure REST APIs.
6561
66-
- Account and container level operations are not supported for the SFTP endpoint.
62+
- Account and container level operations aren't supported for the SFTP endpoint.
6763

6864
## Networking
6965

7066
- To access the storage account using SFTP, your network must allow traffic on port 22.
7167

72-
- When a firewall is configured, connections from non-allowed IPs are not rejected as expected. However, if there is a successful connection for an authenticated user then all data plane operations will be rejected.
73-
74-
- There's a 4 minute timeout for idle or inactive connections. OpenSSH will appear to stop responding and then disconnect. Some clients reconnect automatically.
68+
- There's a 4-minute timeout for idle or inactive connections. OpenSSH will appear to stop responding and then disconnect. Some clients reconnect automatically.
7569

7670
## Security
7771

7872
- Host keys are published [here](secure-file-transfer-protocol-host-keys.md). During the public preview, host keys may rotate frequently.
7973

8074
## Integrations
8175

82-
- Change feed and Event Grid notifications are not supported.
76+
- Change feed and Event Grid notifications aren't supported.
8377

8478
- Network File System (NFS) 3.0 and SFTP can't be enabled on the same storage account.
8579

@@ -89,15 +83,15 @@ For performance issues and considerations, see [SSH File Transfer Protocol (SFTP
8983

9084
## Other
9185

92-
- Special containers such as $logs, $blobchangefeed, $root, $web are not accessible via the SFTP endpoint.
86+
- Special containers such as $logs, $blobchangefeed, $root, $web aren't accessible via the SFTP endpoint.
9387

94-
- Symbolic links are not supported.
88+
- Symbolic links aren't supported.
9589

96-
- `ssh-keyscan` is not supported.
90+
- `ssh-keyscan` isn't supported.
9791

98-
- SSH and SCP commands, that are not SFTP, are not supported.
92+
- SSH and SCP commands that aren't SFTP aren't supported.
9993

100-
- FTPS and FTP are not supported.
94+
- FTPS and FTP aren't supported.
10195

10296
## Troubleshooting
10397

articles/storage/blobs/secure-file-transfer-protocol-support.md

Lines changed: 14 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ author: normesta
55
ms.subservice: blobs
66
ms.service: storage
77
ms.topic: conceptual
8-
ms.date: 03/04/2022
8+
ms.date: 06/03/2022
99
ms.custom: references_regions
1010
ms.author: normesta
1111
ms.reviewer: ylunagaria
@@ -14,7 +14,7 @@ ms.reviewer: ylunagaria
1414

1515
# SSH File Transfer Protocol (SFTP) support for Azure Blob Storage (preview)
1616

17-
Blob storage now supports the SSH File Transfer Protocol (SFTP). This support provides the ability to securely connect to Blob Storage accounts via an SFTP endpoint, allowing you to leverage SFTP for file access, file transfer, as well as file management.
17+
Blob storage now supports the SSH File Transfer Protocol (SFTP). This support provides the ability to securely connect to Blob Storage accounts via an SFTP endpoint, allowing you to use SFTP for file access, file transfer, and file management.
1818

1919
> [!IMPORTANT]
2020
> SFTP support is currently in PREVIEW and is available on general-purpose v2 and premium block blob accounts. Complete [this form](https://forms.office.com/r/gZguN0j65Y) BEFORE using the feature in preview. Registration via 'preview features' is NOT required and confirmation email will NOT be sent after filling out the form. You can IMMEDIATELY access the feature.
@@ -27,7 +27,7 @@ Azure allows secure data transfer to Blob Storage accounts using Azure Blob serv
2727

2828
Prior to the release of this feature, if you wanted to use SFTP to transfer data to Azure Blob Storage you would have to either purchase a third party product or orchestrate your own solution. You would have to create a virtual machine (VM) in Azure to host an SFTP server, and then figure out a way to move data into the storage account.
2929

30-
Now, with SFTP support for Azure Blob Storage, you can enable an SFTP endpoint for Blob Storage accounts with a single setting. Then you can set up local user identities for authentication to transfer data securely without the need to do any additional work.
30+
Now, with SFTP support for Azure Blob Storage, you can enable an SFTP endpoint for Blob Storage accounts with a single setting. Then you can set up local user identities for authentication to transfer data securely without the need to do any more work.
3131

3232
This article describes SFTP support for Azure Blob Storage. To learn how to enable SFTP for your storage account, see [Connect to Azure Blob Storage by using the SSH File Transfer Protocol (SFTP) (preview)](secure-file-transfer-protocol-support-how-to.md).
3333

@@ -42,11 +42,11 @@ Different protocols extend from the hierarchical namespace. The SFTP is one of t
4242
4343
## SFTP permission model
4444

45-
Azure Blob Storage does not support Azure Active Directory (Azure AD) authentication or authorization via SFTP. Instead, SFTP utilizes a new form of identity management called _local users_.
45+
Azure Blob Storage doesn't support Azure Active Directory (Azure AD) authentication or authorization via SFTP. Instead, SFTP utilizes a new form of identity management called _local users_.
4646

4747
Local users must use either a password or a Secure Shell (SSH) private key credential for authentication. You can have a maximum of 1000 local users for a storage account.
4848

49-
To set up access permissions, you will create a local user, and choose authentication methods. Then, for each container in your account, you can specify the level of access you want to give that user.
49+
To set up access permissions, you'll create a local user, and choose authentication methods. Then, for each container in your account, you can specify the level of access you want to give that user.
5050

5151
> [!CAUTION]
5252
> Local users do not interoperate with other Azure Storage permission models such as RBAC (role based access control), ABAC (attribute based access control), and ACLs (access control lists).
@@ -57,11 +57,11 @@ For SFTP enabled storage accounts, you can use the full breadth of Azure Blob St
5757

5858
## Authentication methods
5959

60-
You can authenticate local users connecting via SFTP by using a password or a Secure Shell (SSH) public-private keypair. You can configure both forms of authentication and let connecting local users choose which one to use. However, multifactor authentication, whereby both a valid password and a valid public-private key pair are required for successful authentication is not supported.
60+
You can authenticate local users connecting via SFTP by using a password or a Secure Shell (SSH) public-private keypair. You can configure both forms of authentication and let connecting local users choose which one to use. However, multifactor authentication, whereby both a valid password and a valid public-private key pair are required for successful authentication isn't supported.
6161

6262
#### Passwords
6363

64-
Passwords are generated for you. If you choose password authentication, then your password will be provided after you finish configuring a local user. Make sure to copy that password and save it in a location where you can find it later. You won't be able to retrieve that password from Azure again. If you lose the password, you will have to generate a new one. For security reasons, you can't set the password yourself.
64+
Passwords are generated for you. If you choose password authentication, then your password will be provided after you finish configuring a local user. Make sure to copy that password and save it in a location where you can find it later. You won't be able to retrieve that password from Azure again. If you lose the password, you'll have to generate a new one. For security reasons, you can't set the password yourself.
6565

6666
#### SSH key pairs
6767

@@ -71,7 +71,7 @@ If you choose to authenticate with private-public key pair, you can either gener
7171

7272
## Container permissions
7373

74-
In the current release, you can specify only container-level permissions. Directory-level permissions are not supported. You can choose which containers you want to grant access to and what level of access you want to provide (Read, Write, List, Delete, and Create). Those permissions apply to all directories and subdirectories in the container. You can grant each local user access to as many as 100 containers. Container permissions can also be updated after creating a local user. The following table describes each permission in more detail.
74+
In the current release, you can specify only container-level permissions. Directory-level permissions aren't supported. You can choose which containers you want to grant access to and what level of access you want to provide (Read, Write, List, Delete, and Create). Those permissions apply to all directories and subdirectories in the container. You can grant each local user access to as many as 100 containers. Container permissions can also be updated after creating a local user. The following table describes each permission in more detail.
7575

7676
| Permission | Symbol | Description |
7777
|---|---|---|
@@ -93,7 +93,7 @@ sftp [email protected]
9393
put logfile.txt
9494
```
9595

96-
If you set the home directory of a user to `mycontainer/mydirectory`, then they would connect to that directory. Then, the `logfile.txt` file would be uploaded to `mycontainer/mydirectory`. If you did not set the home directory, then the connection attempt would fail. Instead, connecting users would have to specify a container along with the request and then use SFTP commands to navigate to the target directory before uploading a file. The following example shows this:
96+
If you set the home directory of a user to `mycontainer/mydirectory`, then they would connect to that directory. Then, the `logfile.txt` file would be uploaded to `mycontainer/mydirectory`. If you didn't set the home directory, then the connection attempt would fail. Instead, connecting users would have to specify a container along with the request and then use SFTP commands to navigate to the target directory before uploading a file. The following example shows this:
9797

9898
```powershell
9999
@@ -120,24 +120,28 @@ SFTP support for Azure Blob Storage currently limits its cryptographic algorithm
120120

121121
### Known supported clients
122122

123-
The following clients have compatible algorithm support with SFTP for Azure Blob Storage (preview). See [Limitations and known issues with SSH File Transfer Protocol (SFTP) support for Azure Blob Storage](secure-file-transfer-protocol-known-issues.md) if you are having trouble connecting.
123+
The following clients have compatible algorithm support with SFTP for Azure Blob Storage (preview). See [Limitations and known issues with SSH File Transfer Protocol (SFTP) support for Azure Blob Storage](secure-file-transfer-protocol-known-issues.md) if you're having trouble connecting.
124124

125125
- AsyncSSH 2.1.0+
126+
- Axway
126127
- Cyberduck 7.8.2+
127128
- edtFTPjPRO 7.0.0+
128129
- FileZilla 3.53.0+
129130
- libssh 0.9.5+
130131
- Maverick Legacy 1.7.15+
132+
- Moveit 12.7
131133
- OpenSSH 7.4+
132134
- paramiko 2.8.1+
133135
- PuTTY 0.74+
134136
- QualysML 12.3.41.1+
135137
- RebexSSH 5.0.7119.0+
138+
- Salesforce
136139
- ssh2js 0.1.20+
137140
- sshj 0.27.0+
138141
- SSH.NET 2020.0.0+
139142
- WinSCP 5.10+
140143
- Workday
144+
- XFB.Gateway
141145

142146
> [!NOTE]
143147
> The supported client list above is not exhaustive and may change over time.

0 commit comments

Comments
 (0)