Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

list option + Azure files cannot work with MSI "azure files requires a SAS token for authentication" #2740

Open
nohato opened this issue Jul 2, 2024 · 1 comment · May be fixed by #2664

Comments

@nohato
Copy link

nohato commented Jul 2, 2024

Which version of the AzCopy was used?

Note: The version is visible when running AzCopy without any argument

v10.25

Which platform are you using? (ex: Windows, Mac, Linux)

windows

What command did you run?

Note: Please remove the SAS to avoid exposing your credentials. If you cannot remember the exact command, please retrieve it from the beginning of the log file.

Azcopy.exe login --identity
Azcopy.exe list https://strn0621.file.core.windows.net/file/filename

What problem was encountered?

I have found issue regarding to using MSI when the azcopy uses list option for azure files.

Azcopy.exe login --identity
Azcopy.exe list https://storageaccountname.blob.core.windows.net/file/filename → OK. Blob is OK.
Azcopy.exe list https://storageaccountname.file.core.windows.net/file/filename → NG. SAS is required even though OAUTH is available.
Azcopy.exe copy https://storageaccountname.file.core.windows.net/file/filename → OK. Copy option works fine.

List option + azure files + MSI is not available.

image
image

How can we reproduce the problem in the simplest way?

1.Make windows VM .
2.Make Storage account and make blob and azure files on it.
3.Set contributor RBAC for windows VM system managed ID.
4.Execute azcopy command
Azcopy.exe login --identity
Azcopy.exe list https://storageaccountname.blob.core.windows.net/file/filename
Azcopy.exe list https://storageaccountname.file.core.windows.net/file/filename
Azcopy.exe copy https://storageaccountname.file.core.windows.net/file/filename

Have you found a mitigation/solution?

I could not clarify solution but copy option is working fine.
List option is not well.

// isSource is rather misnomer for canBePublic. We can list public containers, and hence isSource=true

@tanyasethi-msft
Copy link
Member

Hi @nohato, Thanks for reporting this.
This is expected when using Azure Files, and we are adding support for AzCopy List with Files OAuth and will be present in upcoming releases.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants