-
Notifications
You must be signed in to change notification settings - Fork 85
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Regression in recent version of Storage Explorer fails to download files due to response 403 ServiceCode=AuthenticationFailed #2457
Comments
Tested a few releases from https://github.com/microsoft/AzureStorageExplorer/releases |
The error message came from AzCopy so I am not surprised that you don't see it in 1.10.1. If you have time to help us narrow down the issue, in 1.10.1, could you turn on AzCopy (in Preview) and give it a try? I am just interested in knowing whether this was a problem in the older version of AzCopy. Thanks. |
Issue caused by AzCopy not parsing the timestamp in the SAS correctly. |
This has been fixed in AzCopy 10.5. We'll be updating the integrated version to that in release 1.14.1. The integration update has been merged. |
Confirmed this is fixed, tried on 1.20.0 azcopy 10.11.0. |
Storage Explorer Version: 1.11.1
Build Number: 20191121.1
Platform/OS: Windows 10
Architecture: ia32
Regression From: Another recent version, probably 1.1x. My coworker's 1.0 version does not have this issue.
Bug Description
Microsoft Service Fabric team uses Azure Storage Explorer to download specific files from storage accounts using SAS keys generated through ACIS. I am able to open and list the set of files contained in the Azure Storage container through ASE, but when I go to download a file I receive the error:
The ACIS job owner had expressed we have not changed the SAS key generation logic so there has been no change in privileges in our workflow from our end that could result in this issue. My coworker's 1.0 version does not hit this issue. The SAS key we use is minimum privilege and not all access so a delta in the required privilege to download files is a regression for us.
Seems like there may have been a perf optimization or other change in ASE that resulted in a change to minimum privilege to download files from Azure Storage.
Steps to Reproduce
Expected Experience
File is downloaded successfully.
Actual Experience
Error response 403; ServiceCode=AuthenticationFailed
Additional Context
The SAS key we use is minimum privilege. I can supply this directly over IM. My alias is maburlik.
The text was updated successfully, but these errors were encountered: