SignatureDoesNotMatch: The required information to complete authentication was not provided

Help and Support
1

Hi,

I was trying to list objects in Oracle Cloud Object Storage in US West region (not my home region).

$ cat rclone.conf
[oci-phoenix]
type = s3
provider = Other
env_auth = false
access_key_id = a...b
secret_access_key = m..=
region = us-phoenix-1
endpoint = https://namespace.compat.objectstorage.us-phoenix-1.oraclecloud.com

$ uname -r
3.10.0-1062.9.1.el7.x86_64

$ rclone -V
rclone v1.52.3
- os/arch: linux/amd64
- go version: go1.14.7

$ rclone ls oci-phoenix:
2020/08/18 20:08:45 Failed to ls: SignatureDoesNotMatch: The required information to complete authentication was not provided.
        status code: 403, request id: phx-1:hDjiQqttchT5JbdcbZvHAGTu1UjB9xE5stTtBUhzOTaN4SabIeK9gWtG1hCRNHhX, host id:

Oracle Cloud doc states:

If your application does not support setting the region identifier to the correct Oracle Cloud Infrastructure identifier, you must either set the region to us-east-1 or leave it blank. Using this configuration, you can only use the Amazon S3 Compatibility API in your Oracle Cloud Infrastructure home region. If you can manually set the region, you can use the application against any Oracle Cloud Infrastructure region.

I've set up the region in the config file, but it appears it didn't help.

Any ideas?

I have no issues with listing objects in my home region (us-ashburn-1).

Thanks in advance!

2

Does it work if you set the region to be blank? I suspect that is what you need as you've set the endpoint manually (which is correct).

If that doesn't work can you post a redacted config for your home region that does work?

3

Hi Nick,

No, setting the region to blank does not help:

$ cat rclone.conf
[oci-phoenix]
type = s3
provider = Other
env_auth = false
access_key_id = b..0
secret_access_key = m..g=
region =
endpoint = https://idotbmykindx.compat.objectstorage.us-phoenix-1.oraclecloud.com

$ rclone ls oci-phoenix:
2020/08/19 16:38:21 Failed to ls: SignatureDoesNotMatch: The required information to complete authentication was not provided.
        status code: 403, request id: phx-1:-OUvpm-pHfK1Lv-UWD0SyGjELJ0Vu_l9hL1lCn5AlP1EvHEiF0wrFWHjguipMuQK, host id:

Here is the home region output:

[oci]
type = s3
provider = Other
env_auth = false
access_key_id = b..0
secret_access_key = m..=
endpoint = https://idotbmykindx.compat.objectstorage.us-ashburn-1.oraclecloud.com

$ rclone ls oci:
      733 backup_condbtest/ADB/backup_identity/AD09B9F2E6587A40E0539D18000B08F0.json
...
4

Hmm... your initial step at config looks correct according to the oracle docs.

It might be worth trying the latest beta. It has a later S3 SDK.

If that doesn't work can you post an ls attempt with -vv --dump bodies ? That might give a clue.

5

No success with the latest beta as well:

$ ./rclone -V
rclone v1.52.3-315-g85f9bd1a-beta
- os/arch: linux/amd64
- go version: go1.15
$ ./rclone ls oci-phoenix:
2020/08/20 18:08:40 Failed to ls: SignatureDoesNotMatch: The required information to complete authentication was not provided.
        status code: 403, request id: phx-1:YE_Y492sne_fsYZbZrjS4BRbrbFSrdndwAFkQSLiRO6qa1UymOBUiZn-6_h0vW3L, host id:

Dumping bodies with the stable release:

$ rclone -vv --dump bodies ls oci-phoenix:
2020/08/20 18:09:58 DEBUG : rclone: Version "v1.52.3" starting with parameters ["rclone" "-vv" "--dump" "bodies" "ls" "oci-phoenix:"]
2020/08/20 18:09:58 DEBUG : Using config file from "/home/user/.config/rclone/rclone.conf"
2020/08/20 18:09:58 DEBUG : You have specified to dump information. Please be noted that the Accept-Encoding as shown may not be correct in the request and the response may not show Content-Encoding if the go standard libraries auto gzip encoding was in effect. In this case the body of the request will be gunzipped before showing it.
2020/08/20 18:09:58 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2020/08/20 18:09:58 DEBUG : HTTP REQUEST (req 0xc000027e00)
2020/08/20 18:09:58 DEBUG : GET / HTTP/1.1
Host: idotbmykindx.compat.objectstorage.us-phoenix-1.oraclecloud.com
User-Agent: rclone/v1.52.3
Authorization: XXXX
X-Amz-Content-Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
X-Amz-Date: 20200820T150958Z
Accept-Encoding: gzip

2020/08/20 18:09:58 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2020/08/20 18:09:59 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2020/08/20 18:09:59 DEBUG : HTTP RESPONSE (req 0xc000027e00)
2020/08/20 18:09:59 DEBUG : HTTP/1.1 403 Forbidden
Content-Length: 175
Connection: keep-alive
Content-Type: application/xml; charset=utf-8
Date: Thu, 20 Aug 2020 15:09:59 GMT
Opc-Request-Id: phx-1:4ynBIZMxlslri1KiF7i5xd-x9AkR6HjNgVLfE5Y_N1qG2wWXyva0XbfPMDX2I4Em
X-Amz-Request-Id: phx-1:4ynBIZMxlslri1KiF7i5xd-x9AkR6HjNgVLfE5Y_N1qG2wWXyva0XbfPMDX2I4Em
X-Api-Id: s3-compatible

<?xml version='1.0' encoding='UTF-8'?><Error><Message>The required information to complete authentication was not provided.</Message><Code>SignatureDoesNotMatch</Code></Error>
2020/08/20 18:09:59 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2020/08/20 18:09:59 DEBUG : 4 go routines active
2020/08/20 18:09:59 Failed to ls: SignatureDoesNotMatch: The required information to complete authentication was not provided.
        status code: 403, request id: phx-1:4ynBIZMxlslri1KiF7i5xd-x9AkR6HjNgVLfE5Y_N1qG2wWXyva0XbfPMDX2I4Em, host id:

HTH

6

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.