ECS: S3 fungerer ikke med signatur v4, men gjør det med v2

The request signature we calculated does not match the signature you provided. Check your Secret Access Key and signing method. For more information, see REST Authentication and SOAP Authentication for details.

2018-02-08T01:02:22,160 [qtp1281445260-47251-ac16c920:16153c4ec5b:5428:a-s3-192.168.x.x] ERROR  S3V4Signer.java (line 270) Signature mismatch CalcSignature: 1beacc1d4410c0d39a18e99b241a8c430ad7f76f030a54595406901feddfddb1, ClientSignature: 874250cee333e6aba9b12abfd279516408a083da60d0b1cc3f8b196a6fe8cdb1
2018-02-08T01:02:22,160 [qtp1281445260-47251-ac16c920:16153c4ec5b:5428:a-s3-192.168.x.x] ERROR  S3V4Signer.java (line 270) Signature mismatch CalcSignature: 1beacc1d4410c0d39a18e99b241a8c430ad7f76f030a54595406901feddfddb1, ClientSignature: 874250cee333e6aba9b12abfd279516408a083da60d0b1cc3f8b196a6fe8cdb1
2018-02-08T01:02:22,160 [qtp1281445260-47251-ac16c920:16153c4ec5b:5428:a-s3-192.168.x.x] ERROR  HMACAuthenticationHandler.java (line 178) authenticate failed. RequestId ac16c920:16153c4ec5b:5428:a. Error com.emc.storageos.data.api.service.impl.resource.s3.S3Exception

Enten Load Balancer eller Proxy Server endret vertsoverskriften slik at den pekte til et annet sluttpunkt enn det som var konfigurert.

Få svar på spørsmålene nedenfor:

• Hvilken ECS-versjon er installert? S3 Signature v4 støttes siden ECS 3.0.
• Hvilken versjon av verktøy som brukes som Multer Explorer, S3 Browser?
• Bruker tilkoblingen Load Balancer eller Proxy Server?
• Hvis ja: Prøv v4-tilkoblingen ved å bruke en ECS-node som endepunkt
• Hvis dette fungerer, må klienten undersøke innstillingene for Load Balancer eller Proxy Server videre

For Apache bør innstillingene nedenfor verifiseres: Aktiver dette alternativet for å beholde vertshodet.

ProxyPreserveHost Directive
Description:
Use incoming Host HTTP request header for proxy request
Syntax:
ProxyPreserveHost On|Off
Default:
ProxyPreserveHost Off
Context:
server config, virtual host, directory
Status:
Extension
Module:
mod_proxy
Compatibility:
Usable in directory context in 2.3.3 and later.
When enabled, this option will pass the Host: line from the incoming request to the proxied host, instead of the hostname specified in the ProxyPass line.
This option should normally be turned Off. It is mostly useful in special configurations like proxied mass name-based virtual hosting, where the original Host header needs to be evaluated by the backend server.

Du finner mer informasjon her: https://httpd.apache.org/docs/2.4/mod/mod_proxy.html#proxypreservehost