Sharepoint - There has been an error authenticating the request

What is the problem you are having with rclone?

We are trying to configure the rclone for file upload to a Sharepoint site. We are guests to this site, and its admins have granted our (guest) account with necessary rights.

We were occasionally getting "There has been an error authenticating the request.". But when we access the site using a web browser (with authentication), rclone will start working again. But this will only last for probably 1 hour before the same issue takes over.

Run the command 'rclone version' and share the full output of the command.

rclone v1.66.0

  • os/version: ubuntu 22.04 (64 bit)
  • os/kernel: 5.15.0-101-generic (x86_64)
  • os/type: linux
  • os/arch: amd64
  • go/version: go1.22.1
  • go/linking: static
  • go/tags: none

Which cloud storage system are you using? (eg Google Drive)

Sharepoint

The command you were trying to run (eg rclone copy /tmp remote:tmp)

rclone --config=/path/config_file ls remotename:/

Please run 'rclone config redacted' and share the full output. If you get command not found, please make sure to update rclone.

[remotename]
type = onedrive
token = XXX
access_scopes = Files.Read Files.ReadWrite Files.Read.All Files.ReadWrite.All offline_access
drive_id = XXX
drive_type = documentLibrary
auth_url = https://login.microsoftonline.com/XXX/oauth2/v2.0/authorize
token_url = https://login.microsoftonline.com/XXX/oauth2/v2.0/token
chunk_size = 250Mi

A log from the command that you were trying to run with the -vv flag

2024/08/27 08:50:05 DEBUG : rclone: Version "v1.66.0" starting with parameters ["rclone" "-vv" "--dump" "bodies" "--config=config_file" "ls" "remotename:"]
2024/08/27 08:50:05 DEBUG : Creating backend with remote "remotename:"
2024/08/27 08:50:05 DEBUG : Using config file from "/path/config_file"
2024/08/27 08:50:05 DEBUG : You have specified to dump information. Please be noted that the Accept-Encoding as shown may not be correct in the request and the response may not show Content-Encoding if the go standard libraries auto gzip encoding was in effect. In this case the body of the request will be gunzipped before showing it.
2024/08/27 08:50:05 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2024/08/27 08:50:05 DEBUG : HTTP REQUEST (req 0xc000981200)
2024/08/27 08:50:05 DEBUG : GET /v1.0/drives/b!dtr0MUkXXXXXXXXXXXXXXXXXXHia82KsNDnEisXXXXXXX/root HTTP/1.1
Host: graph.microsoft.com
User-Agent: rclone/v1.66.0
Authorization: XXXX
Accept-Encoding: gzip

2024/08/27 08:50:05 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2024/08/27 08:50:06 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2024/08/27 08:50:06 DEBUG : HTTP RESPONSE (req 0xc000981200)
2024/08/27 08:50:06 DEBUG : HTTP/2.0 401 Unauthorized
Cache-Control: private
Client-Request-Id: 8c5c271d-abfb-4b03-8467-c26cfccc04b8
Content-Type: application/json
Date: Tue, 27 Aug 2024 12:50:06 GMT
Request-Id: 8c5c271d-abfb-4b03-8467-c26cfccc04b8
Strict-Transport-Security: max-age=31536000
Vary: Accept-Encoding
Www-Authenticate: Bearer realm="", authorization_uri="https://login.microsoftonline.com/common/oauth2/authorize", client_id="00000003-0000-0000-c000-000000000000"
X-Ms-Ags-Diagnostic: {"ServerInfo":{"DataCenter":"Canada Central","Slice":"E","Ring":"3","ScaleUnit":"002","RoleInstance":"YT2PEPF00000277"}}

{"error":{"code":"accessDenied","message":"There has been an error authenticating the request."}}
2024/08/27 08:50:06 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2024/08/27 08:50:06 Failed to create file system for "remotename:": failed to get root: accessDenied: There has been an error authenticating the request.

Hi,

Is there a chance that we could have some assistance? Thank you very much.

hi,

possible workaround: access sharepoint over webdav, which does not use a token

that is an old version of rclone, can run rclone selfupdate

Hi Jojo,

Unfortunately, we had tried webdav first before going for the Sharepoint route.

With webdav, we were receiving:

X-Ms-Invokeapp: 1; RequireReadOnly

X-Msdavext_error: 917656; Access+denied.+Before+opening+files+in+this+location%2c+you+must+first+browse+to+the+web+site+and+select+the+option+to+login+automatically.
read metadata failed: 403 FORBIDDEN: 403 Forbidden.

ok, same issue, twice now, using webdav remote, using onedrive remote.
the issue seems to be the server side, not rclone.

should contact the admins.

Hi Jojo,

Thank you and noted. I suspected the same problem and wanted to double-check.

T.