Cyberduck Mountain Duck CLI

#7786 closed defect (thirdparty)

Large file uploads fail with 403 Forbidden

Reported by: lcraciun Owned by: dkocher
Priority: normal Milestone: 4.4.4
Component: s3 Version: 4.4.3
Severity: normal Keywords:
Cc: Architecture: Intel
Platform: Mac OS X 10.8

Description

Hi,

After upgrading from 4.3 to 4.4.3, S3 uploads of files larger then ~500MB fail with 403 Forbidden. I've tested with the same credentials, files and bucket and it's working in 4.3.1

Here is the log:

GET / HTTP/1.1
Date: Tue, 11 Feb 2014 15:07:30 GMT
Authorization: AWS AKIAIS5M73ZQSVM2CSFQ:VpWPo9hH5iyJ7srXVG4IDje1Fb0=
Host: s3.amazonaws.com:443
Connection: Keep-Alive
User-Agent: Cyberduck/4.4.3 (Mac OS X/10.8.5) (x86_64)
HTTP/1.1 200 OK
x-amz-id-2: nTYdl9IVqC+9FCVTPzEx87pJKFgCMb2vxDwcVKuXjMGzC5spvFCi+jWuLVWFOmhn
x-amz-request-id: 455546FD51DAEA38
Date: Tue, 11 Feb 2014 15:07:32 GMT
Content-Type: application/xml
Transfer-Encoding: chunked
Server: AmazonS3
GET /?prefix=koce%2FCentOS-6.5-x86_64-LiveCD.iso&uploads HTTP/1.1
Date: Tue, 11 Feb 2014 15:07:31 GMT
Authorization: AWS AKIAIS5M73ZQSVM2CSFQ:VraQFKdbD3EGMMpc09rPibIT6F0=
Host: pbs-ingest.s3.amazonaws.com:443
Connection: Keep-Alive
User-Agent: Cyberduck/4.4.3 (Mac OS X/10.8.5) (x86_64)
HTTP/1.1 403 Forbidden
x-amz-request-id: 400E0AF5869852E2
x-amz-id-2: 3kenflrCdpmlGa1OPfrgKkzSeO1/YH/pbCLmff+Lj2mCbonP4u6npD1X9vP8viT9
Content-Type: application/xml
Transfer-Encoding: chunked
Date: Tue, 11 Feb 2014 15:07:31 GMT
Server: AmazonS3

Thanks.

Change History (2)

comment:1 Changed on Feb 11, 2014 at 7:19:43 PM by dkocher

  • Milestone set to 4.4.4
  • Summary changed from Large file uploads on S3 fail with 403 Forbiden to Large file uploads fail with 403 Forbidden

comment:2 Changed on Feb 12, 2014 at 1:39:16 PM by dkocher

  • Resolution set to thirdparty
  • Status changed from new to closed

I suspect this is a IAM user that is missing a full read policy grant for the bucket. We are using multipart uploads for files larger than 100MB that requires to list existing multiparts in the bucket.

Note: See TracTickets for help on using tickets.
swiss made software