401 error when using rclone copyurl to clone ms graph recordings to minio bucket

I am using rclone copyurl to clone recordings of a MS teams meeting to my minio s3 bucket. Now since the recording content MS graph API requires access token I am passing the access token to command but its giving an error.

What is the problem you are having with rclone?

The command I am using to clone is :

rclone copyurl "https://graph.microsoft.com/v1.0/users/0fe2a305-cb0e-4f37-b606-bbed2d92656b/onlineMeetings/MSowZmUyYTMwNS1jYjBlLTRmMzctYjYwNi1iYmVkMmQ5MjY1NmIqMCoqMTk6bWVldGluZ19ZMk13TWpBell6WXRNMk5tTWkwME1UazRMV0ZoTVdZdFpqUTJNVEJoTTJObFl6TmxAdGhyZWFkLnYy/recordings/ktVizIbGAAAAiPB3lATZRTE5Om1lZXRpbmdfWTJNd01qQXpZell0TTJObU1pMDBNVGs0TFdGaE1XWXRaalEyTVRCaE0yTmxZek5sQHRocmVhZC52MqEw2Tk3NzNjNmQ5ZC1lZWRmLTQ0ZGUtODI2ZC0xZGZiZDJmYzg5MWUtMTc1OTY3NjE0NC1SZWNvcmRpbmc=/content" \
  "local:testpress/test.mp4" \
  --header "Authorization: Bearer eyJ0e__xxxxx__QtgA" \
  -P -vv

And its giving me the below error

Failed to copyurl with 2 errors: last error was: multipart upload failed to initialise: failed to prepare upload: operation error S3: CreateBucket, https response error StatusCode: 403, RequestID: 186C320278EF5EDB, HostID: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8, api error AccessDenied: Access Denied.

Although to test whether my access token is valid. I modified my bucket path to my local directory and it worked. Also when I am uploading it into bucket its giving me the error and when I try to upload publicly accessible file it gets uploaded:

rclone copyurl "https://commondatastorage.googleapis.com/gtv-videos-bucket/sample/BigBuckBunny.mp4" \
  "local:testpress/test.mp4" \
  -P -vv

Run the command 'rclone version' and share the full output of the command.

rclone v1.71.0

  • os/version: darwin 15.6.1 (64 bit)
  • os/kernel: 24.6.0 (arm64)
  • os/type: darwin
  • os/arch: arm64 (ARMv8 compatible)
  • go/version: go1.25.0
  • go/linking: dynamic
  • go/tags: cmount

Which cloud storage system are you using? (eg Google Drive)

S3 Minio

The command you were trying to run (eg rclone copy /tmp remote:tmp)

rclone copyurl "https://graph.microsoft.com/v1.0/users/0fe2a305-cb0e-4f37-b606-bbed2d92656b/onlineMeetings/MSowZmUyYTMwNS1jYjBlLTRmMzctYjYwNi1iYmVkMmQ5MjY1NmIqMCoqMTk6bWVldGluZ19ZMk13TWpBell6WXRNMk5tTWkwME1UazRMV0ZoTVdZdFpqUTJNVEJoTTJObFl6TmxAdGhyZWFkLnYy/recordings/ktVizIbGAAAAiPB3lATZRTE5Om1lZXRpbmdfWTJNd01qQXpZell0TTJObU1pMDBNVGs0TFdGaE1XWXRaalEyTVRCaE0yTmxZek5sQHRocmVhZC52MqEw2Tk3NzNjNmQ5ZC1lZWRmLTQ0ZGUtODI2ZC0xZGZiZDJmYzg5MWUtMTc1OTY3NjE0NC1SZWNvcmRpbmc=/content" \
  "local:testpress/test.mp4" \
  --header "Authorization: Bearer eyJ0e__xxxxx__QtgA" \
  -P -vv

Please run 'rclone config redacted' and share the full output. If you get command not found, please make sure to update rclone.

(testpress) rps@rps testpress % rclone config redacted
[local]
type = s3
provider = Minio
access_key_id = XXX
secret_access_key = XXX
endpoint = http://localhost:9000
acl = public-read
### Double check the config for sensitive info before posting publicly

A log from the command that you were trying to run with the -vv flag

(testpress) rps@rps testpress % rclone copyurl "https://graph.microsoft.com/v1.0/users/0fe2a305-cb0e-4f37-b606-bbed2d92656b/onlineMeetings/MSowZmUyYTMwNS1jYjBlLTRmMzctYjYwNi1iYmVkMmQ5MjY1NmIqMCoqMTk6bWVldGluZ19ZMk13TWpBell6WXRNMk5tTWkwME1UazRMV0ZoTVdZdFpqUTJNVEJoTTJObFl6TmxAdGhyZWFkLnYy/recordings/ktVizIbGAAAAiPB3lATZRTE5Om1lZXRpbmdfWTJNd01qQXpZell0TTJObU1pMDBNVGs0TFdGaE1XWXRaalEyTVRCaE0yTmxZek5sQHRocmVhZC52MqEw2Tk3NzNjNmQ5ZC1lZWRmLTQ0ZGUtODI2ZC0xZGZiZDJmYzg5MWUtMTc1OTY3NjE0NC1SZWNvcmRpbmc=/content" \
  "local:testpress/test.mp4" \
  --header "Authorization: Bearer eyJ0eXAiOiJKV1QiLCJub25jZSI6IkhPMm1nN0liMHFnc0V4alZENnVzWDVyOTVHenZha0wtbjRSc2tWa0tIVUEiLCJhbGciOiJSUzI1NiIsIng1dCI6IkhTMjNiN0RvN1RjYVUxUm9MSHdwSXEyNFZZZyIsImtpZCI6IkhTMjNiN0RvN1RjYVUxUm9MSHdwSXEyNFZZZyJ9.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.VFx5Xj54uFEGV0H94KJm4msQ7KfLOUUzitGHKRHB-FNJSnCbAE3vrH5cgDDHRbnTo6gaVGrDiPfem_mvRvI6ZhlTsWS2Hk1D3YS9lN9QMuft1sH3KbWp44xNzx_OHxbH6witdQsj2Q_RcCILm4vU6u7iukrbWf49BIhdOpLTpZYsOncds9h3pdoACNtxGLbexZJPxQP2YzsKK8qv6Udkdl_zffOFK7SizJcAyOiuiwsP2HJLK8GME2x2h_EF-tajj2nvzxgg6GZeLUtIapHQcW9pDv0pwWxDIwaVSpcc0AMN63QX0ORalPrHtcV4kDnGaSZCHmb8M3I1oZwf582vvw" \
  -P -vv --dump-headers
2025/10/07 17:10:55 NOTICE: --dump-headers is obsolete - please use --dump headers instead
2025/10/07 17:10:55 DEBUG : rclone: Version "v1.71.0" starting with parameters ["rclone" "copyurl" "https://graph.microsoft.com/v1.0/users/0fe2a305-cb0e-4f37-b606-bbed2d92656b/onlineMeetings/MSowZmUyYTMwNS1jYjBlLTRmMzctYjYwNi1iYmVkMmQ5MjY1NmIqMCoqMTk6bWVldGluZ19ZMk13TWpBell6WXRNMk5tTWkwME1UazRMV0ZoTVdZdFpqUTJNVEJoTTJObFl6TmxAdGhyZWFkLnYy/recordings/ktVizIbGAAAAiPB3lATZRTE5Om1lZXRpbmdfWTJNd01qQXpZell0TTJObU1pMDBNVGs0TFdGaE1XWXRaalEyTVRCaE0yTmxZek5sQHRocmVhZC52MqEw2Tk3NzNjNmQ5ZC1lZWRmLTQ0ZGUtODI2ZC0xZGZiZDJmYzg5MWUtMTc1OTY3NjE0NC1SZWNvcmRpbmc=/content" "local:testpress/test.mp4" "--header" "Authorization: Bearer eyJ0eXAiOiJKV1QiLCJub25jZSI6IkhPMm1nN0liMHFnc0V4alZENnVzWDVyOTVHenZha0wtbjRSc2tWa0tIVUEiLCJhbGciOiJSUzI1NiIsIng1dCI6IkhTMjNiN0RvN1RjYVUxUm9MSHdwSXEyNFZZZyIsImtpZCI6IkhTMjNiN0RvN1RjYVUxUm9MSHdwSXEyNFZZZyJ9.eyJhdWQiOiJodHRwczovL2dyYXBoLm1pY3Jvc29mdC5jb20iLCJpc3MiOiJodHRwczovL3N0cy53aW5kb3dzLm5ldC85ODJlYTBhYS1iNzg3LTQ4M2QtYWZmYS0wZThiOGRiZTc4YzAvIiwiaWF0IjoxNzU5ODM2OTIyLCJuYmYiOjE3NTk4MzY5MjIsImV4cCI6MTc1OTg0MDgyMiwiYWlvIjoiazJKZ1lNZzE3NW9TZmVIS2xLMWxIMytFOEhmS0FBQT0iLCJhcHBfZGlzcGxheW5hbWUiOiJUZXN0cHJlc3MiLCJhcHBpZCI6ImE4MzRlMDQyLWU1YmEtNGE5Ni1hZWZhLWFkYzEyMzgyM2UwYiIsImFwcGlkYWNyIjoiMSIsImlkcCI6Imh0dHBzOi8vc3RzLndpbmRvd3MubmV0Lzk4MmVhMGFhLWI3ODctNDgzZC1hZmZhLTBlOGI4ZGJlNzhjMC8iLCJpZHR5cCI6ImFwcCIsIm9pZCI6ImI0ZTk3NTQxLWQyOGYtNDk4ZS1hYTU4LTg5ZTI5MjJkZWYxYSIsInJoIjoiMS5BYjRBcXFBdW1JZTNQVWl2LWc2TGpiNTR3QU1BQUFBQUFBQUF3QUFBQUFBQUFBQi1BUUMtQUEuIiwicm9sZXMiOlsiT25saW5lTWVldGluZ3MuUmVhZC5BbGwiLCJPbmxpbmVNZWV0aW5ncy5SZWFkV3JpdGUuQWxsIiwiVXNlci5SZWFkV3JpdGUuQWxsIiwiT25saW5lTWVldGluZ0FydGlmYWN0LlJlYWQuQWxsIiwiT25saW5lTWVldGluZ1JlY29yZGluZy5SZWFkLkFsbCIsIkNhbGxSZWNvcmRzLlJlYWQuQWxsIiwiVXNlci5SZWFkLkFsbCIsIkZpbGVzLlJlYWQuQWxsIiwiQ2hhdC5SZWFkLkFsbCIsIkNhbGVuZGFycy5SZWFkV3JpdGUiLCJNYWlsLlNlbmQiXSwic3ViIjoiYjRlOTc1NDEtZDI4Zi00OThlLWFhNTgtODllMjkyMmRlZjFhIiwidGVuYW50X3JlZ2lvbl9zY29wZSI6IkFTIiwidGlkIjoiOTgyZWEwYWEtYjc4Ny00ODNkLWFmZmEtMGU4YjhkYmU3OGMwIiwidXRpIjoiVHhsZWtiVF9KVW1fRndWOU9kQW9BQSIsInZlciI6IjEuMCIsIndpZHMiOlsiMDk5N2ExZDAtMGQxZC00YWNiLWI0MDgtZDVjYTczMTIxZTkwIl0sInhtc19hY2QiOjE3NTgzODIxNzQsInhtc19hY3RfZmN0IjoiMyA5IiwieG1zX2Z0ZCI6IjEzNjBCRXZBcTE2MDJTYzdzaVdUYVNRcjUzbkVQdzZVU1d2czk5enVQOHNCYTI5eVpXRmpaVzUwY21Gc0xXUnpiWE0iLCJ4bXNfaWRyZWwiOiI3IDI0IiwieG1zX3JkIjoiMC40MkxqWUJKaTJzY29KTUxCTGlUUWFMb3ItdlMtblE1OTc0OHhmUk5iZnc0b3lpa2tvRjI2TTNDWHlVX1BsWUpzYVRLOVYwS0FvaHhDQXN3TUVIQUFTZ01BIiwieG1zX3N1Yl9mY3QiOiI5IDMiLCJ4bXNfdGNkdCI6MTc1ODI4NDE4NiwieG1zX3RudF9mY3QiOiIzIDQifQ.VFx5Xj54uFEGV0H94KJm4msQ7KfLOUUzitGHKRHB-FNJSnCbAE3vrH5cgDDHRbnTo6gaVGrDiPfem_mvRvI6ZhlTsWS2Hk1D3YS9lN9QMuft1sH3KbWp44xNzx_OHxbH6witdQsj2Q_RcCILm4vU6u7iukrbWf49BIhdOpLTpZYsOncds9h3pdoACNtxGLbexZJPxQP2YzsKK8qv6Udkdl_zffOFK7SizJcAyOiuiwsP2HJLK8GME2x2h_EF-tajj2nvzxgg6GZeLUtIapHQcW9pDv0pwWxDIwaVSpcc0AMN63QX0ORalPrHtcV4kDnGaSZCHmb8M3I1oZwf582vvw" "-P" "-vv" "--dump-headers"]
2025/10/07 17:10:55 DEBUG : Creating backend with remote "local:testpress/"
2025/10/07 17:10:55 DEBUG : Using config file from "/Users/rps/.config/rclone/rclone.conf"
2025/10/07 17:10:55 DEBUG : You have specified to dump information. Please be noted that the Accept-Encoding as shown may not be correct in the request and the response may not show Content-Encoding if the go standard libraries auto gzip encoding was in effect. In this case the body of the request will be gunzipped before showing it.
2025/10/07 17:10:55 DEBUG : You have specified to dump information. Please be noted that the Accept-Encoding as shown may not be correct in the request and the response may not show Content-Encoding if the go standard libraries auto gzip encoding was in effect. In this case the body of the request will be gunzipped before showing it.
2025/10/07 17:10:55 DEBUG : fs cache: renaming cache item "local:testpress/" to be canonical "local:testpress"
2025/10/07 17:10:55 DEBUG : You have specified to dump information. Please be noted that the Accept-Encoding as shown may not be correct in the request and the response may not show Content-Encoding if the go standard libraries auto gzip encoding was in effect. In this case the body of the request will be gunzipped before showing it.
2025/10/07 17:10:55 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2025/10/07 17:10:55 DEBUG : HTTP REQUEST (req 0x140003ba640)
2025/10/07 17:10:55 DEBUG : GET /v1.0/users/0fe2a305-cb0e-4f37-b606-bbed2d92656b/onlineMeetings/MSowZmUyYTMwNS1jYjBlLTRmMzctYjYwNi1iYmVkMmQ5MjY1NmIqMCoqMTk6bWVldGluZ19ZMk13TWpBell6WXRNMk5tTWkwME1UazRMV0ZoTVdZdFpqUTJNVEJoTTJObFl6TmxAdGhyZWFkLnYy/recordings/ktVizIbGAAAAiPB3lATZRTE5Om1lZXRpbmdfWTJNd01qQXpZell0TTJObU1pMDBNVGs0TFdGaE1XWXRaalEyTVRCaE0yTmxZek5sQHRocmVhZC52MqEw2Tk3NzNjNmQ5ZC1lZWRmLTQ0ZGUtODI2ZC0xZGZiZDJmYzg5MWUtMTc1OTY3NjE0NC1SZWNvcmRpbmc=/content HTTP/1.1
Host: graph.microsoft.com
User-Agent: rclone/v1.71.0
Authorization: XXXX
Accept-Encoding: gzip
2025/10/07 17:10:55 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2025/10/07 17:10:56 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2025/10/07 17:10:56 DEBUG : HTTP RESPONSE (req 0x140003ba640)
2025/10/07 17:10:56 DEBUG : HTTP/2.0 200 OK
Connection: close
Cache-Control: private
Client-Request-Id: aec295ca-7711-42c1-abe8-ffd8d115ff12
Content-Type: video/mp4
Date: Tue, 07 Oct 2025 11:40:56 GMT
Etag: "{89869F58-0D1E-4537-8C2A-0D0D626D7106},10"
Request-Id: aec295ca-7711-42c1-abe8-ffd8d115ff12
Splogid: 650acda1-003e-3000-0660-f85b2cdac9f9
Strict-Transport-Security: max-age=31536000
X-Ms-Ags-Diagnostic: {"ServerInfo":{"DataCenter":"South India","Slice":"E","Ring":"2","ScaleUnit":"002","RoleInstance":"MA1PEPF00009601"}}
2025/10/07 17:10:56 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2025/10/07 17:10:56 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2025/10/07 17:10:56 DEBUG : HTTP REQUEST (req 0x1400074e3c0)
2025/10/07 17:10:56 DEBUG : PUT /testpress HTTP/1.1
Host: localhost:9000
User-Agent: rclone/v1.71.0
Content-Length: 0
Accept-Encoding: identity
Amz-Sdk-Invocation-Id: b4ffae2c-993d-484a-b9ce-a5683f6d1d49
Amz-Sdk-Request: attempt=1; max=10
Authorization: XXXX
X-Amz-Acl: public-read
X-Amz-Content-Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
X-Amz-Date: 20251007T114056Z
2025/10/07 17:10:56 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2025/10/07 17:10:56 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2025/10/07 17:10:56 DEBUG : HTTP RESPONSE (req 0x1400074e3c0)
2025/10/07 17:10:56 DEBUG : HTTP/1.1 403 Forbidden
Content-Length: 297
Accept-Ranges: bytes
Content-Type: application/xml
Date: Tue, 07 Oct 2025 11:40:56 GMT
Server: MinIO
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
Vary: Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 186C32A9449EA96D
X-Content-Type-Options: nosniff
X-Ratelimit-Limit: 2165
X-Ratelimit-Remaining: 2165
X-Xss-Protection: 1; mode=block
2025/10/07 17:10:56 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2025/10/07 17:10:57 ERROR : test.mp4: Post request rcat error: multipart upload failed to initialise: failed to prepare upload: operation error S3: CreateBucket, https response error StatusCode: 403, RequestID: 186C32A9449EA96D, HostID: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8, api error AccessDenied: Access Denied.
2025/10/07 17:10:57 ERROR : Attempt 1/3 failed with 2 errors and: multipart upload failed to initialise: failed to prepare upload: operation error S3: CreateBucket, https response error StatusCode: 403, RequestID: 186C32A9449EA96D, HostID: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8, api error AccessDenied: Access Denied.
2025/10/07 17:10:57 DEBUG : You have specified to dump information. Please be noted that the Accept-Encoding as shown may not be correct in the request and the response may not show Content-Encoding if the go standard libraries auto gzip encoding was in effect. In this case the body of the request will be gunzipped before showing it.
2025/10/07 17:10:57 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2025/10/07 17:10:57 DEBUG : HTTP REQUEST (req 0x140001b6140)
2025/10/07 17:10:57 DEBUG : GET /v1.0/users/0fe2a305-cb0e-4f37-b606-bbed2d92656b/onlineMeetings/MSowZmUyYTMwNS1jYjBlLTRmMzctYjYwNi1iYmVkMmQ5MjY1NmIqMCoqMTk6bWVldGluZ19ZMk13TWpBell6WXRNMk5tTWkwME1UazRMV0ZoTVdZdFpqUTJNVEJoTTJObFl6TmxAdGhyZWFkLnYy/recordings/ktVizIbGAAAAiPB3lATZRTE5Om1lZXRpbmdfWTJNd01qQXpZell0TTJObU1pMDBNVGs0TFdGaE1XWXRaalEyTVRCaE0yTmxZek5sQHRocmVhZC52MqEw2Tk3NzNjNmQ5ZC1lZWRmLTQ0ZGUtODI2ZC0xZGZiZDJmYzg5MWUtMTc1OTY3NjE0NC1SZWNvcmRpbmc=/content HTTP/1.1
Host: graph.microsoft.com
User-Agent: rclone/v1.71.0
Authorization: XXXX
Accept-Encoding: gzip
2025/10/07 17:10:57 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2025/10/07 17:10:58 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2025/10/07 17:10:58 DEBUG : HTTP RESPONSE (req 0x140001b6140)
2025/10/07 17:10:58 DEBUG : HTTP/2.0 200 OK
Connection: close
Cache-Control: private
Client-Request-Id: 059b3b6b-2c4b-4c8e-92db-436c9d411577
Content-Type: video/mp4
Date: Tue, 07 Oct 2025 11:40:57 GMT
Etag: "{89869F58-0D1E-4537-8C2A-0D0D626D7106},10"
Request-Id: 059b3b6b-2c4b-4c8e-92db-436c9d411577
Splogid: 650acda1-d093-3000-0660-f15fe8b521e2
Strict-Transport-Security: max-age=31536000
X-Ms-Ags-Diagnostic: {"ServerInfo":{"DataCenter":"South India","Slice":"E","Ring":"2","ScaleUnit":"002","RoleInstance":"MA1PEPF0000ECE0"}}
2025/10/07 17:10:58 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2025/10/07 17:10:58 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2025/10/07 17:10:58 DEBUG : HTTP REQUEST (req 0x140003bba40)
2025/10/07 17:10:58 DEBUG : PUT /testpress HTTP/1.1
Host: localhost:9000
User-Agent: rclone/v1.71.0
Content-Length: 0
Accept-Encoding: identity
Amz-Sdk-Invocation-Id: 4a815d2c-e3c6-4168-aca4-f11017882549
Amz-Sdk-Request: attempt=1; max=10
Authorization: XXXX
X-Amz-Acl: public-read
X-Amz-Content-Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
X-Amz-Date: 20251007T114058Z
2025/10/07 17:10:58 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2025/10/07 17:10:58 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2025/10/07 17:10:58 DEBUG : HTTP RESPONSE (req 0x140003bba40)
2025/10/07 17:10:58 DEBUG : HTTP/1.1 403 Forbidden
Content-Length: 297
Accept-Ranges: bytes
Content-Type: application/xml
Date: Tue, 07 Oct 2025 11:40:58 GMT
Server: MinIO
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
Vary: Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 186C32A994702692
X-Content-Type-Options: nosniff
X-Ratelimit-Limit: 2165
X-Ratelimit-Remaining: 2165
X-Xss-Protection: 1; mode=block
2025/10/07 17:10:58 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2025/10/07 17:10:58 ERROR : test.mp4: Post request rcat error: multipart upload failed to initialise: failed to prepare upload: operation error S3: CreateBucket, https response error StatusCode: 403, RequestID: 186C32A994702692, HostID: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8, api error AccessDenied: Access Denied.
2025/10/07 17:10:58 ERROR : Attempt 2/3 failed with 2 errors and: multipart upload failed to initialise: failed to prepare upload: operation error S3: CreateBucket, https response error StatusCode: 403, RequestID: 186C32A994702692, HostID: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8, api error AccessDenied: Access Denied.
2025/10/07 17:10:58 DEBUG : You have specified to dump information. Please be noted that the Accept-Encoding as shown may not be correct in the request and the response may not show Content-Encoding if the go standard libraries auto gzip encoding was in effect. In this case the body of the request will be gunzipped before showing it.
2025/10/07 17:10:58 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2025/10/07 17:10:58 DEBUG : HTTP REQUEST (req 0x1400074e140)
2025/10/07 17:10:58 DEBUG : GET /v1.0/users/0fe2a305-cb0e-4f37-b606-bbed2d92656b/onlineMeetings/MSowZmUyYTMwNS1jYjBlLTRmMzctYjYwNi1iYmVkMmQ5MjY1NmIqMCoqMTk6bWVldGluZ19ZMk13TWpBell6WXRNMk5tTWkwME1UazRMV0ZoTVdZdFpqUTJNVEJoTTJObFl6TmxAdGhyZWFkLnYy/recordings/ktVizIbGAAAAiPB3lATZRTE5Om1lZXRpbmdfWTJNd01qQXpZell0TTJObU1pMDBNVGs0TFdGaE1XWXRaalEyTVRCaE0yTmxZek5sQHRocmVhZC52MqEw2Tk3NzNjNmQ5ZC1lZWRmLTQ0ZGUtODI2ZC0xZGZiZDJmYzg5MWUtMTc1OTY3NjE0NC1SZWNvcmRpbmc=/content HTTP/1.1
Host: graph.microsoft.com
User-Agent: rclone/v1.71.0
Authorization: XXXX
Accept-Encoding: gzip
2025/10/07 17:10:58 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2025/10/07 17:10:59 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2025/10/07 17:10:59 DEBUG : HTTP RESPONSE (req 0x1400074e140)
2025/10/07 17:10:59 DEBUG : HTTP/2.0 200 OK
Connection: close
Cache-Control: private
Client-Request-Id: 9e500b9e-9d11-4a2e-9078-fe80e1e78fb7
Content-Type: video/mp4
Date: Tue, 07 Oct 2025 11:40:59 GMT
Etag: "{89869F58-0D1E-4537-8C2A-0D0D626D7106},10"
Request-Id: 9e500b9e-9d11-4a2e-9078-fe80e1e78fb7
Splogid: 650acda1-d0ed-3000-e398-422053af0a05
Strict-Transport-Security: max-age=31536000
X-Ms-Ags-Diagnostic: {"ServerInfo":{"DataCenter":"South India","Slice":"E","Ring":"2","ScaleUnit":"002","RoleInstance":"MA1PEPF00011E6D"}}
2025/10/07 17:10:59 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2025/10/07 17:10:59 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2025/10/07 17:10:59 DEBUG : HTTP REQUEST (req 0x1400074edc0)
2025/10/07 17:10:59 DEBUG : PUT /testpress HTTP/1.1
Host: localhost:9000
User-Agent: rclone/v1.71.0
Content-Length: 0
Accept-Encoding: identity
Amz-Sdk-Invocation-Id: 1bb53af4-1d50-42c2-8077-6d06cd001467
Amz-Sdk-Request: attempt=1; max=10
Authorization: XXXX
X-Amz-Acl: public-read
X-Amz-Content-Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
X-Amz-Date: 20251007T114059Z
2025/10/07 17:10:59 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2025/10/07 17:10:59 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2025/10/07 17:10:59 DEBUG : HTTP RESPONSE (req 0x1400074edc0)
2025/10/07 17:10:59 DEBUG : HTTP/1.1 403 Forbidden
Content-Length: 297
Accept-Ranges: bytes
Content-Type: application/xml
Date: Tue, 07 Oct 2025 11:40:59 GMT
Server: MinIO
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
Vary: Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 186C32A9E9FAE218
X-Content-Type-Options: nosniff
X-Ratelimit-Limit: 2165
X-Ratelimit-Remaining: 2165
X-Xss-Protection: 1; mode=block
2025/10/07 17:10:59 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2025/10/07 17:10:59 ERROR : test.mp4: Post request rcat error: multipart upload failed to initialise: failed to prepare upload: operation error S3: CreateBucket, https response error StatusCode: 403, RequestID: 186C32A9E9FAE218, HostID: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8, api error AccessDenied: Access Denied.
2025/10/07 17:10:59 ERROR : Attempt 3/3 failed with 2 errors and: multipart upload failed to initialise: failed to prepare upload: operation error S3: CreateBucket, https response error StatusCode: 403, RequestID: 186C32A9E9FAE218, HostID: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8, api error AccessDenied: Access Denied.
Transferred:          300 KiB / 300 KiB, 100%, 0 B/s, ETA -
Errors:                 2 (retrying may help)
Elapsed time:         4.2s
2025/10/07 17:10:59 INFO  :
Transferred:          300 KiB / 300 KiB, 100%, 0 B/s, ETA -
Errors:                 2 (retrying may help)
Elapsed time:         4.2s

2025/10/07 17:10:59 DEBUG : 9 go routines active
2025/10/07 17:10:59 NOTICE: Failed to copyurl with 2 errors: last error was: multipart upload failed to initialise: failed to prepare upload: operation error S3: CreateBucket, https response error StatusCode: 403, RequestID: 186C32A9E9FAE218, HostID: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8, api error AccessDenied: Access Denied.
(testpress) rps@rps testpress %

welcome to the forum,

try --s3-no-check-bucket
or
adjust the bucket policy to allow that.


and to keep the log small for testing, use -retries=1

I even tried that earlier but still the 401 error is prominent.

(testpress) rps@rps testpress % rclone copyurl "https://graph.microsoft.com/v1.0/users/0fe2a305-cb0e-4f37-b606-bbed2d92656b/onlineMeetings/MSowZmUyYTMwNS1jYjBlLTRmMzctYjYwNi1iYmVkMmQ5MjY1NmIqMCoqMTk6bWVldGluZ19ZMk13TWpBell6WXRNMk5tTWkwME1UazRMV0ZoTVdZdFpqUTJNVEJoTTJObFl6TmxAdGhyZWFkLnYy/recordings/ktVizIbGAAAAiPB3lATZRTE5Om1lZXRpbmdfWTJNd01qQXpZell0TTJObU1pMDBNVGs0TFdGaE1XWXRaalEyTVRCaE0yTmxZek5sQHRocmVhZC52MqEw2Tk3NzNjNmQ5ZC1lZWRmLTQ0ZGUtODI2ZC0xZGZiZDJmYzg5MWUtMTc1OTY3NjE0NC1SZWNvcmRpbmc=/content" \
  "rps:testpress/test.mp4" \
  --header "Authorization: Bearer ey__xxxx__vw" \
  -P -vv --dump-headers --s3-no-check-bucket --retries=1
2025/10/07 18:39:54 NOTICE: --dump-headers is obsolete - please use --dump headers instead
2025/10/07 18:39:54 DEBUG : rclone: Version "v1.71.0" starting with parameters ["rclone" "copyurl" "https://graph.microsoft.com/v1.0/users/0fe2a305-cb0e-4f37-b606-bbed2d92656b/onlineMeetings/MSowZmUyYTMwNS1jYjBlLTRmMzctYjYwNi1iYmVkMmQ5MjY1NmIqMCoqMTk6bWVldGluZ19ZMk13TWpBell6WXRNMk5tTWkwME1UazRMV0ZoTVdZdFpqUTJNVEJoTTJObFl6TmxAdGhyZWFkLnYy/recordings/ktVizIbGAAAAiPB3lATZRTE5Om1lZXRpbmdfWTJNd01qQXpZell0TTJObU1pMDBNVGs0TFdGaE1XWXRaalEyTVRCaE0yTmxZek5sQHRocmVhZC52MqEw2Tk3NzNjNmQ5ZC1lZWRmLTQ0ZGUtODI2ZC0xZGZiZDJmYzg5MWUtMTc1OTY3NjE0NC1SZWNvcmRpbmc=/content" "rps:testpress/test.mp4" "--header" "Authorization: Bearer eyJ0eXAiOiJKV1QiLCJub25jZSI6IkhPMm1nN0liMHFnc0V4alZENnVzWDVyOTVHenZha0wtbjRSc2tWa0tIVUEiLCJhbGciOiJSUzI1NiIsIng1dCI6IkhTMjNiN0RvN1RjYVUxUm9MSHdwSXEyNFZZZyIsImtpZCI6IkhTMjNiN0RvN1RjYVUxUm9MSHdwSXEyNFZZZyJ9.eyJhdWQiOiJodHRwczovL2dyYXBoLm1pY3Jvc29mdC5jb20iLCJpc3MiOiJodHRwczovL3N0cy53aW5kb3dzLm5ldC85ODJlYTBhYS1iNzg3LTQ4M2QtYWZmYS0wZThiOGRiZTc4YzAvIiwiaWF0IjoxNzU5ODM2OTIyLCJuYmYiOjE3NTk4MzY5MjIsImV4cCI6MTc1OTg0MDgyMiwiYWlvIjoiazJKZ1lNZzE3NW9TZmVIS2xLMWxIMytFOEhmS0FBQT0iLCJhcHBfZGlzcGxheW5hbWUiOiJUZXN0cHJlc3MiLCJhcHBpZCI6ImE4MzRlMDQyLWU1YmEtNGE5Ni1hZWZhLWFkYzEyMzgyM2UwYiIsImFwcGlkYWNyIjoiMSIsImlkcCI6Imh0dHBzOi8vc3RzLndpbmRvd3MubmV0Lzk4MmVhMGFhLWI3ODctNDgzZC1hZmZhLTBlOGI4ZGJlNzhjMC8iLCJpZHR5cCI6ImFwcCIsIm9pZCI6ImI0ZTk3NTQxLWQyOGYtNDk4ZS1hYTU4LTg5ZTI5MjJkZWYxYSIsInJoIjoiMS5BYjRBcXFBdW1JZTNQVWl2LWc2TGpiNTR3QU1BQUFBQUFBQUF3QUFBQUFBQUFBQi1BUUMtQUEuIiwicm9sZXMiOlsiT25saW5lTWVldGluZ3MuUmVhZC5BbGwiLCJPbmxpbmVNZWV0aW5ncy5SZWFkV3JpdGUuQWxsIiwiVXNlci5SZWFkV3JpdGUuQWxsIiwiT25saW5lTWVldGluZ0FydGlmYWN0LlJlYWQuQWxsIiwiT25saW5lTWVldGluZ1JlY29yZGluZy5SZWFkLkFsbCIsIkNhbGxSZWNvcmRzLlJlYWQuQWxsIiwiVXNlci5SZWFkLkFsbCIsIkZpbGVzLlJlYWQuQWxsIiwiQ2hhdC5SZWFkLkFsbCIsIkNhbGVuZGFycy5SZWFkV3JpdGUiLCJNYWlsLlNlbmQiXSwic3ViIjoiYjRlOTc1NDEtZDI4Zi00OThlLWFhNTgtODllMjkyMmRlZjFhIiwidGVuYW50X3JlZ2lvbl9zY29wZSI6IkFTIiwidGlkIjoiOTgyZWEwYWEtYjc4Ny00ODNkLWFmZmEtMGU4YjhkYmU3OGMwIiwidXRpIjoiVHhsZWtiVF9KVW1fRndWOU9kQW9BQSIsInZlciI6IjEuMCIsIndpZHMiOlsiMDk5N2ExZDAtMGQxZC00YWNiLWI0MDgtZDVjYTczMTIxZTkwIl0sInhtc19hY2QiOjE3NTgzODIxNzQsInhtc19hY3RfZmN0IjoiMyA5IiwieG1zX2Z0ZCI6IjEzNjBCRXZBcTE2MDJTYzdzaVdUYVNRcjUzbkVQdzZVU1d2czk5enVQOHNCYTI5eVpXRmpaVzUwY21Gc0xXUnpiWE0iLCJ4bXNfaWRyZWwiOiI3IDI0IiwieG1zX3JkIjoiMC40MkxqWUJKaTJzY29KTUxCTGlUUWFMb3ItdlMtblE1OTc0OHhmUk5iZnc0b3lpa2tvRjI2TTNDWHlVX1BsWUpzYVRLOVYwS0FvaHhDQXN3TUVIQUFTZ01BIiwieG1zX3N1Yl9mY3QiOiI5IDMiLCJ4bXNfdGNkdCI6MTc1ODI4NDE4NiwieG1zX3RudF9mY3QiOiIzIDQifQ.VFx5Xj54uFEGV0H94KJm4msQ7KfLOUUzitGHKRHB-FNJSnCbAE3vrH5cgDDHRbnTo6gaVGrDiPfem_mvRvI6ZhlTsWS2Hk1D3YS9lN9QMuft1sH3KbWp44xNzx_OHxbH6witdQsj2Q_RcCILm4vU6u7iukrbWf49BIhdOpLTpZYsOncds9h3pdoACNtxGLbexZJPxQP2YzsKK8qv6Udkdl_zffOFK7SizJcAyOiuiwsP2HJLK8GME2x2h_EF-tajj2nvzxgg6GZeLUtIapHQcW9pDv0pwWxDIwaVSpcc0AMN63QX0ORalPrHtcV4kDnGaSZCHmb8M3I1oZwf582vvw" "-P" "-vv" "--dump-headers" "--s3-no-check-bucket" "--retries=1"]
2025/10/07 18:39:54 DEBUG : Creating backend with remote "rps:testpress/"
2025/10/07 18:39:54 DEBUG : Using config file from "/Users/rps/.config/rclone/rclone.conf"
2025/10/07 18:39:54 DEBUG : rps: detected overridden config - adding "{Dn7qA}" suffix to name
2025/10/07 18:39:54 DEBUG : You have specified to dump information. Please be noted that the Accept-Encoding as shown may not be correct in the request and the response may not show Content-Encoding if the go standard libraries auto gzip encoding was in effect. In this case the body of the request will be gunzipped before showing it.
2025/10/07 18:39:54 DEBUG : You have specified to dump information. Please be noted that the Accept-Encoding as shown may not be correct in the request and the response may not show Content-Encoding if the go standard libraries auto gzip encoding was in effect. In this case the body of the request will be gunzipped before showing it.
2025/10/07 18:39:54 DEBUG : fs cache: renaming cache item "rps:testpress/" to be canonical "rps{Dn7qA}:testpress"
2025/10/07 18:39:54 DEBUG : You have specified to dump information. Please be noted that the Accept-Encoding as shown may not be correct in the request and the response may not show Content-Encoding if the go standard libraries auto gzip encoding was in effect. In this case the body of the request will be gunzipped before showing it.
2025/10/07 18:39:54 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2025/10/07 18:39:54 DEBUG : HTTP REQUEST (req 0x140004a8140)
2025/10/07 18:39:54 DEBUG : GET /v1.0/users/0fe2a305-cb0e-4f37-b606-bbed2d92656b/onlineMeetings/MSowZmUyYTMwNS1jYjBlLTRmMzctYjYwNi1iYmVkMmQ5MjY1NmIqMCoqMTk6bWVldGluZ19ZMk13TWpBell6WXRNMk5tTWkwME1UazRMV0ZoTVdZdFpqUTJNVEJoTTJObFl6TmxAdGhyZWFkLnYy/recordings/ktVizIbGAAAAiPB3lATZRTE5Om1lZXRpbmdfWTJNd01qQXpZell0TTJObU1pMDBNVGs0TFdGaE1XWXRaalEyTVRCaE0yTmxZek5sQHRocmVhZC52MqEw2Tk3NzNjNmQ5ZC1lZWRmLTQ0ZGUtODI2ZC0xZGZiZDJmYzg5MWUtMTc1OTY3NjE0NC1SZWNvcmRpbmc=/content HTTP/1.1
Host: graph.microsoft.com
User-Agent: rclone/v1.71.0
Authorization: XXXX
Accept-Encoding: gzip
2025/10/07 18:39:54 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2025/10/07 18:39:54 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2025/10/07 18:39:54 DEBUG : HTTP RESPONSE (req 0x140004a8140)
2025/10/07 18:39:54 DEBUG : HTTP/2.0 401 Unauthorized
Client-Request-Id: bdabe563-044b-4e19-8a09-7fa3fcd77597
Content-Type: application/json
Date: Tue, 07 Oct 2025 13:09:54 GMT
Request-Id: bdabe563-044b-4e19-8a09-7fa3fcd77597
Strict-Transport-Security: max-age=31536000
Vary: Accept-Encoding
Www-Authenticate: Bearer realm="", authorization_uri="https://login.microsoftonline.com/common/oauth2/authorize", client_id="00000003-0000-0000-c000-000000000000"
Www-Authenticate: PoP realm="", authorization_uri="https://login.microsoftonline.com/common/oauth2/authorize", client_id="00000003-0000-0000-c000-000000000000", nonce="eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjIxRDVBMThENkVGMThBNkE2OUUxOENCMDYxOEU0QjhFRjVGNTgyMzUifQ.eyJ0cyI6MTc1OTg0MjU0MH0.0IVejCt9-1dWeL1fc9MkbCkiRKmxZvNkl5ecygN7Z3fmnboSeE4EgoiiUyZNTupL767dagtn8oFUYdKIyFihSR-6mmpc4t8dMDul04DoO6m-qnWnaKPZFM-G49vMGD9F-B9vOWDbYJBCYPyVXR1QpsdtzPzyBZQNMHctvDL06eUfWGKufwLNTfi5GManpfJsuRwmUJcR03fQZTaGa_U0FxrVQEQp3TaXahai6NcNz8xJcNPYg1gm37T3I1iXdjDh-6zNCCdFV4pFrrCFqs9Kw9tJYaTV6rQic68q9RHGtYh4tFHRPrS_n5NbIeVuBbvFLJe1gm0VtMEwQ-8qI18XkA"
X-Ms-Ags-Diagnostic: {"ServerInfo":{"DataCenter":"South India","Slice":"E","Ring":"2","ScaleUnit":"000","RoleInstance":"MA1PEPF000095F1"}}
2025/10/07 18:39:54 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2025/10/07 18:39:54 ERROR : Attempt 1/1 failed with 1 errors and: CopyURL failed: 401 Unauthorized
Transferred:              0 B / 0 B, -, 0 B/s, ETA -
Errors:                 1 (retrying may help)
Elapsed time:         0.0s
2025/10/07 18:39:54 INFO  :
Transferred:              0 B / 0 B, -, 0 B/s, ETA -
Errors:                 1 (retrying may help)
Elapsed time:         0.0s

2025/10/07 18:39:54 DEBUG : 6 go routines active
2025/10/07 18:39:54 NOTICE: Failed to copyurl: CopyURL failed: 401 Unauthorized

that is a different error then before.
the previous error is 403, which seems to have been solved by suggestion of using --s3-no-check-bucket

Yes, but the same token which I am passing in —headers flag seems to work when I run the below command with the output path as my local directory path

rclone copyurl "https://graph.microsoft.com/v1.0/users/0fe2a305-cb0e-4f37-b606-bbed2d92656b/onlineMeetings/MSowZmUyYTMwNS1jYjBlLTRmMzctYjYwNi1iYmVkMmQ5MjY1NmIqMCoqMTk6bWVldGluZ19ZMk13TWpBell6WXRNMk5tTWkwME1UazRMV0ZoTVdZdFpqUTJNVEJoTTJObFl6TmxAdGhyZWFkLnYy/recordings/ktVizIbGAAAAiPB3lATZRTE5Om1lZXRpbmdfWTJNd01qQXpZell0TTJObU1pMDBNVGs0TFdGaE1XWXRaalEyTVRCaE0yTmxZek5sQHRocmVhZC52MqEw2Tk3NzNjNmQ5ZC1lZWRmLTQ0ZGUtODI2ZC0xZGZiZDJmYzg5MWUtMTc1OTY3NjE0NC1SZWNvcmRpbmc=/content" \
  "./local_directory.mp4" \
  --header "Authorization: Bearer ey__xxxxx__vvw" \
  -P -vv --dump-headers --s3-no-check-bucket --retries=1

a bit confused.

what is that?

confusing, that is normally used for local paths, not a name of s3 remotes


that might be confusing the minio remote.
try a different --header flag
or
try adding that to the rclone config file.

sorry for confusion: I was trying to create a fresh docker image of minio to run remotely and test locally. Currently my config is:

(testpress) rps@rps testpress % rclone config redacted
[rps]
type = s3
provider = Minio
access_key_id = XXX
secret_access_key = XXX
endpoint = http://127.0.0.1:9000
acl = public-read
### Double check the config for sensitive info before posting publicly

And I am trying to upload a url of a teams meeting recording (microsoft graph api) which requires access token which I am passing using the --headers option.

Now the problem is when I try to copy and upload in the bucket I am getting this error but when I use rclone to copy it in my local directory it works.

yes, you mentioned that before


in my last post, i suggested two options, did neither work??

Yes, neither of those worked, I referred this page and tried all these flag options –header, –header-download and –header-upload. None of them seem to work and I am getting this 401 error.

no idea, as the updated config file was not posted, the debug log was not posted.