ECS: S3 fungerer ikke med signatur v4, men gør med v2

Summary: S3-signatur v4 understøttes siden ECS-kodeversion 3.0, men forbindelsen kan mislykkes, hvis Load Balancer (LB) eller proxyserveren er konfigureret forkert.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

Programmer som S3 Browser eller CloudBerry Explorer kan ikke oprette forbindelse til ECS ved hjælp af S3-signatur v4, og nedenstående fejlmeddelelse kan ses: 
The request signature we calculated does not match the signature you provided. Check your Secret Access Key and signing method. For more information, see REST Authentication and SOAP Authentication for details.
Fejl vist i dataheadsvc.log: 
2018-02-08T01:02:22,160 [qtp1281445260-47251-ac16c920:16153c4ec5b:5428:a-s3-192.168.x.x] ERROR  S3V4Signer.java (line 270) Signature mismatch CalcSignature: 1beacc1d4410c0d39a18e99b241a8c430ad7f76f030a54595406901feddfddb1, ClientSignature: 874250cee333e6aba9b12abfd279516408a083da60d0b1cc3f8b196a6fe8cdb1
2018-02-08T01:02:22,160 [qtp1281445260-47251-ac16c920:16153c4ec5b:5428:a-s3-192.168.x.x] ERROR  S3V4Signer.java (line 270) Signature mismatch CalcSignature: 1beacc1d4410c0d39a18e99b241a8c430ad7f76f030a54595406901feddfddb1, ClientSignature: 874250cee333e6aba9b12abfd279516408a083da60d0b1cc3f8b196a6fe8cdb1
2018-02-08T01:02:22,160 [qtp1281445260-47251-ac16c920:16153c4ec5b:5428:a-s3-192.168.x.x] ERROR  HMACAuthenticationHandler.java (line 178) authenticate failed. RequestId ac16c920:16153c4ec5b:5428:a. Error com.emc.storageos.data.api.service.impl.resource.s3.S3Exception
Brug af S3-signatur v2 fungerer.

Cause

Enten Load Balancer eller proxyserveren ændrede værtsheaderen, så den pegede på et andet slutpunkt end det, der var konfigureret.

Resolution

Få svar på nedenstående spørgsmål:

  • Hvilken ECS-version er installeret? S3-signatur v4 understøttes siden ECS 3.0.
  • Hvilken version af værktøjer, der bruges, såsom Cloudberry Explorer, S3 Browser?
  • Bruger forbindelsen Load Balancer eller proxyserver?
  • Hvis ja: Prøv v4-forbindelsen ved at bruge en ECS-node som slutpunkt
  • Hvis dette fungerer, skal klienten yderligere undersøge indstillingerne for Load Balancer eller proxyserver


For Apache skal nedenstående indstillinger bekræftes: Slå denne indstilling til for at bevare værtsheaderen.

ProxyPreserveHost Directive
Description:
Use incoming Host HTTP request header for proxy request
Syntax:
ProxyPreserveHost On|Off
Default:
ProxyPreserveHost Off
Context:
server config, virtual host, directory
Status:
Extension
Module:
mod_proxy
Compatibility:
Usable in directory context in 2.3.3 and later.
When enabled, this option will pass the Host: line from the incoming request to the proxied host, instead of the hostname specified in the ProxyPass line.
This option should normally be turned Off. It is mostly useful in special configurations like proxied mass name-based virtual hosting, where the original Host header needs to be evaluated by the backend server.

Få flere oplysninger her: https://httpd.apache.org/docs/2.4/mod/mod_proxy.html#proxypreservehostDette hyperlink fører dig til et websted uden for Dell Technologies.

Additional Information


Affected Products

ECS Appliance

Products

ECS Appliance, Elastic Cloud Storage
Article Properties
Article Number: 000034122
Article Type: Solution
Last Modified: 28 Aug 2025
Version:  4
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.