mirror of
https://github.com/s3fs-fuse/s3fs-fuse.git
synced 2026-04-25 21:35:58 +03:00
[GH-ISSUE #1535] s3fs can't connect using MFA and role setup from command #805
Labels
No labels
bug
bug
dataloss
duplicate
enhancement
feature request
help wanted
invalid
need info
performance
pull-request
question
question
testing
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/s3fs-fuse#805
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @emper0r on GitHub (Jan 25, 2021).
Original GitHub issue: https://github.com/s3fs-fuse/s3fs-fuse/issues/1535
Additional Information
The following information is very important in order to help us to help you. Omission of the following details may delay your support request or receive no attention at all.
Keep in mind that the commands we provide to retrieve information are oriented to GNU/Linux Distributions, so you could need to use others if you use s3fs on macOS or BSD
Version of s3fs being used (s3fs --version)
Amazon Simple Storage Service File System V1.88 (commit:6d65e30) with OpenSSLVersion of fuse being used (pkg-config --modversion fuse, rpm -qi fuse, dpkg -s fuse)
Kernel information (uname -r)
3.10.0-1160.6.1.el7.x86_64GNU/Linux Distribution, if applicable (cat /etc/os-release)
s3fs command line used, if applicable
using /etc/passwd-s3fs
not using /etc/passwd-s3fs but using assuming role
/etc/fstab entry, if applicable
s3fs syslog messages (grep s3fs /var/log/syslog, journalctl | grep s3fs, or s3fs outputs)
Details about issue
@juliogonzalez commented on GitHub (Jan 25, 2021):
@emper0r I am confused: are you using 1.87 or 1.88? The description contradicts itself. The
Versionsection says 1.88, but the RPM package lists below says 1.87.Right now EPEL7 only has 1.87, as 1.88 is still on the queue to be published (https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-8873b594c6)
@emper0r commented on GitHub (Jan 26, 2021):
Hi @juliogonzalez , I uninstalled 1.87 from rpm and I remain with source compiled 1.88 in any case is the same issue. hang-up trying connect to link-local IP address,
so uninstalling compiled version 1.88 and re-install rpm epel 1.87 same thing too.
s3fs keeps trying to connect to link-local
[INF] curl.cpp:RemakeHandle(2313): Retry request. [type=12][url=http://169.254.169.254/latest/meta-data/iam/security-credentials/devop_test
Can you tell me with a clean system the correct steps to test it ? then I tell how was...
@emper0r commented on GitHub (Jan 29, 2021):
Hi again, I reinstalled and create an user without mfa, directly access key and secret key, with another program I can access by api to my bucket, but with s3fs can't do.
the /etc/passwd-s3fs is correct and the error keep saying this
[CURL DBG] * Closing connection 1
[ERR] curl.cpp:RequestPerform(2282): HTTP response code 400, returning EIO. Body Text:
IllegalLocationConstraintExceptionThe eu-south-1 location constraint is incompatible for the region specific endpoint this request was sent to.7553F1890C4B7B0A57LmdLLPdjpH/ZD3WIMxtx7p78hq/baq7/ogfWdyC8IEzWkrAPgrc3h27/c+cs1f4oK2Nu+N31Q=[ERR] curl.cpp:CheckBucket(3344): Check bucket failed, S3 response:
IllegalLocationConstraintExceptionThe eu-south-1 location constraint is incompatible for the region specific endpoint this request was sent to.7553F1890C4B7B0A57LmdLLPdjpH/ZD3WIMxtx7p78hq/baq7/ogfWdyC8IEzWkrAPgrc3h27/c+cs1f4oK2Nu+N31Q=[CRT] s3fs.cpp:s3fs_check_service(3483): Bad Request(host=https://s3.amazonaws.com) - result of checking service.
[ERR] s3fs.cpp:s3fs_exit_fuseloop(3290): Exiting FUSE event loop due to errors
I test it in many ways... but can't connect with the bucket
any help ????????????????????????????????????
@juliogonzalez commented on GitHub (Jan 30, 2021):
The manual page for s3fs says:
Try to add the end point for your bucket.
@juliogonzalez commented on GitHub (Jan 30, 2021):
I don't know how the bucket was created, but check if this affects you:
https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateBucket.html
@juliogonzalez commented on GitHub (Feb 7, 2021):
@emper0r did
endpointfix your problem?@emper0r commented on GitHub (Feb 18, 2021):
no
@douglasjam commented on GitHub (May 5, 2023):
Same issue for me, only eu-south-1 fails
with sigv4
sigv2
@douglasjam commented on GitHub (May 5, 2023):
Found a way around
s3fs ${S3FS_BUCKET_CH} ${USER_HOME}/ch -o allow_other -o umask=0002 -o uid=1001 -o gid=1001 -o nonempty -o url=https://s3.eu-south-1.amazonaws.com -o endpoint=eu-south-1@ggtakec commented on GitHub (May 13, 2023):
Once #2155 is merged, if an error occurs at s3fs launching, it will become to output a message including suggestions about options(url/endpoint etc.).
@douglasjam
Thanks, I have reflected the results of your investigation.