Support

UNiTE, Remote CLI, eXtract Wizard

#34304 – Access denied to bucket with UNITE

Posted in ‘UNiTE, Remote CLI, eXtract Wizard’
This is a public ticket. Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.
Wednesday, 06 January 2021 11:27 CST
jfquestiaux

Hi,

I'm testing UNITE with my S3 backups but I get a "Akeeba\Engine\Postproc\Connector\S3v4\Connector::getBucket(): [0] Access Denied" error.

The settings are the same as in the Akeeba backup profile, and this is working (I can backup to and retreive backup from S3).

Here are the XML settings:

<s3>
<accesskey>XXX</accesskey>
<secretkey>YYY</secretkey>
<signature>v4</signature>
<bucket>ZZZ</bucket>
<region>eu-west-1</region>
<ssl>1</ssl>
<filename>/home/xxx/full/site-www.xxx.be-20210106-001502.jps</filename>
</s3>

The 'XXX' values are of course the correct ones, same as in the Akeeba profile.

I tried it both from a local and a remote server.

Custom Fields

Which tool do you want support for? UNITE
Tool version (in x.y.z format) 4.1.3

Joomla! Web Agency : Better Web
SEO, performances improvements, custom web applications, AMP pages, migrations,...

Wednesday, 06 January 2021 16:16 CST
nicholas

Akeeba UNiTE uses the same S3 library as Akeeba Backup. There is a discrepancy between what you've entered in Akeeba Backup and what you've entered in UNiTE.

Remember that the bucket is case-sensitive. ABC, abc and Abc are three different buckets. Make sure the region is set correctly and matches the region of your bucket. Make sure there are no spaces or other whitespace characters between the tags. The access and secret key may contain characters which are invalid XML. Wrap them in CDATA e.g.

<accesskey><![CDATA[YOUR_ACCESS_KEY]]></accesskey>
<secretkey><![CDATA[YOUR_SECRET_KEY]]></secretkey>

Make sure that your computer / server time is set correctly and synchronised to a network time server. Moreover, make sure your computer's / server's timezone is set correctly. Amazon S3 has a maximum allowed time drift of 15 minutes (the time is included with the request and is part of the signature we send to Amazon S3). Beyond that allowed drift it will reject the request and return an access denied error.



Nicholas K. Dionysopoulos

Lead Developer and Director



πŸ‡¬πŸ‡·Greek: native

πŸ‡¬πŸ‡§English: excellent

πŸ‡«πŸ‡·French: basic



Please keep in mind my timezone and cultural differences when reading my replies. Thank you!



Thursday, 07 January 2021 02:08 CST
jfquestiaux

Thank you for your answer.

There is however a different way to set the data in Akeebabackup and in Unite: in Akeeba, the path to the folder starts with a "/" while you have to remove it in UNITE.

So anyway, it is working now and I must say, it's quite impressive! This is really an amazing piece of software and I'll dive more into its possibilities. Thank you for that.

Happy New Year,
Jean-François Questiaux

Joomla! Web Agency : Better Web
SEO, performances improvements, custom web applications, AMP pages, migrations,...

Thursday, 07 January 2021 05:54 CST
nicholas

Akeeba Backup automatically removes the leading slash because it's never part of the path. In fact, calling it a path is pretty much a misnomer. Amazon S3 doesn't have a filesystem hierarchy as such. It is a key-value storage. Keys can contain multiple prefixes separated with slashes. This gives the illusion of a filesystem hierarchy, especially since this is the way it's represented by default in the S3 bucket explorer and most software integrating with S3.

A leading slash would imply an empty prefix which is invalid. Akeeba Backup removes the leading slash automatically thus fixing a common and reasonable typo β€” considering that most people don't know that S3 doesn't have a filesystem hierarchy. Akeeba UNiTE doesn't do that. It's meant to be used by people who aren't afraid to get their hands dirty with configuration files and command line tools. The assumption is that this subgroup of users would know not to add a leading slash.

I will add a note in the documentation about that. I see that the assumption I made wasn't true and I should give you a heads up :)



Nicholas K. Dionysopoulos

Lead Developer and Director



πŸ‡¬πŸ‡·Greek: native

πŸ‡¬πŸ‡§English: excellent

πŸ‡«πŸ‡·French: basic



Please keep in mind my timezone and cultural differences when reading my replies. Thank you!



Saturday, 06 February 2021 20:17 CST
system
This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.
This ticket is closed, therefore read-only. You can no longer reply to it. If you need to provide more information, please open a new ticket and mention this ticket's number.

Support Information

Working hours: Typically we work Monday to Friday, 9am to 7pm Cyprus timezone (EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets, but we cannot respond to them, outside of our working hours.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!