Skip to content

Issues with multipart copy to azureblob-sdk backend #997

@Irubataru

Description

@Irubataru

I am having an issue when doing a multipart copy to an Azure backend with the azureblob-sdk. If I copy the files with e.g. the Minio CLI it works for small files, but if I do a larger file (and thus use multipart) I get the following exception

<head>
<meta http-equiv="Content-Type" content="text/html;charset=ISO-8859-1"/>
<title>
  Error 500 com.azure.storage.blob.models.BlobStorageException: If you are using a StorageSharedKeyCredential,
  and the server returned an error message that says &apos;Signature did not match&apos;, you can compare the
  string to sign with the one generated by the SDK. To log the string to sign, pass in the context key value pair
  &apos;Azure-Storage-Log-String-To-Sign&apos;: true to the appropriate method call.

  If you are using a SAS token, and the server returned an error message that says &apos;Signature did not
  match&apos;, you can compare the string to sign with the one generated by the SDK. To log the string to sign,
  pass in the context key value pair &apos;Azure-Storage-Log-String-To-Sign&apos;: true to the appropriate
  generateSas method call.

  Please remember to disable &apos;Azure-Storage-Log-String-To-Sign&apos; before going to production as this
  string can potentially contain PII.
  Status code 403, &quot;?&lt;?x...

I do not know what is going wrong, but it seems to be tied to multipart. If I disable multiplart for the large file, it works again.

mcli cp --disable-multipart random.bin s3proxy/bucket

I have given the managed identity the Storage Blob Data Contributor RBAC role. Is that not enough?

I am using v3.0.0 of s3proxy, but I have also tried the master tag for the docker image.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions