Support

UNiTE, Remote CLI, eXtract Wizard

#34304 Access denied to bucket with UNITE

Posted in ‘UNiTE and Remote CLI’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

PHP version
n/a
Tool
UNiTE
Tool version
n/a

Latest post by on Saturday, 06 February 2021 20:17 CST

jfquestiaux

Hi,

I'm testing UNITE with my S3 backups but I get a "Akeeba\Engine\Postproc\Connector\S3v4\Connector::getBucket(): [0] Access Denied" error.

The settings are the same as in the Akeeba backup profile, and this is working (I can backup to and retreive backup from S3).

Here are the XML settings:

<s3>
<accesskey>XXX</accesskey>
<secretkey>YYY</secretkey>
<signature>v4</signature>
<bucket>ZZZ</bucket>
<region>eu-west-1</region>
<ssl>1</ssl>
<filename>/home/xxx/full/site-www.xxx.be-20210106-001502.jps</filename>
</s3>

The 'XXX' values are of course the correct ones, same as in the Akeeba profile.

I tried it both from a local and a remote server.

Joomla! Web Agency : Better Web
SEO, performances improvements, custom web applications, AMP pages, migrations,...

nicholas
Akeeba Staff
Manager

Akeeba UNiTE uses the same S3 library as Akeeba Backup. There is a discrepancy between what you've entered in Akeeba Backup and what you've entered in UNiTE.

Remember that the bucket is case-sensitive. ABC, abc and Abc are three different buckets. Make sure the region is set correctly and matches the region of your bucket. Make sure there are no spaces or other whitespace characters between the tags. The access and secret key may contain characters which are invalid XML. Wrap them in CDATA e.g.

<accesskey><![CDATA[YOUR_ACCESS_KEY]]></accesskey>
<secretkey><![CDATA[YOUR_SECRET_KEY]]></secretkey>

Make sure that your computer / server time is set correctly and synchronised to a network time server. Moreover, make sure your computer's / server's timezone is set correctly. Amazon S3 has a maximum allowed time drift of 15 minutes (the time is included with the request and is part of the signature we send to Amazon S3). Beyond that allowed drift it will reject the request and return an access denied error.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

jfquestiaux

Thank you for your answer.

There is however a different way to set the data in Akeebabackup and in Unite: in Akeeba, the path to the folder starts with a "/" while you have to remove it in UNITE.

So anyway, it is working now and I must say, it's quite impressive! This is really an amazing piece of software and I'll dive more into its possibilities. Thank you for that.

Happy New Year,
Jean-François Questiaux

Joomla! Web Agency : Better Web
SEO, performances improvements, custom web applications, AMP pages, migrations,...

nicholas
Akeeba Staff
Manager

Akeeba Backup automatically removes the leading slash because it's never part of the path. In fact, calling it a path is pretty much a misnomer. Amazon S3 doesn't have a filesystem hierarchy as such. It is a key-value storage. Keys can contain multiple prefixes separated with slashes. This gives the illusion of a filesystem hierarchy, especially since this is the way it's represented by default in the S3 bucket explorer and most software integrating with S3.

A leading slash would imply an empty prefix which is invalid. Akeeba Backup removes the leading slash automatically thus fixing a common and reasonable typo — considering that most people don't know that S3 doesn't have a filesystem hierarchy. Akeeba UNiTE doesn't do that. It's meant to be used by people who aren't afraid to get their hands dirty with configuration files and command line tools. The assumption is that this subgroup of users would know not to add a leading slash.

I will add a note in the documentation about that. I see that the assumption I made wasn't true and I should give you a heads up :)

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

System Task
system
This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!