Hi Changmao, It seems your s3cmd config should include 2 items:
signature_v2 = True host_base = api2.cloud-datayes.com Riak CS requires "signature_v2 = True" since Riak CS has not supported s3 authentication version 4 yet. You can find a sample configuration of s3cmd here to interact with Riak CS [1]. [1]: http://docs.basho.com/riakcs/2.0.1/cookbooks/configuration/Configuring-an-S3-Client/#Sample-s3cmd-Configuration-File-for-Production-Use Thanks, On Thu, Aug 20, 2015 at 7:44 PM, changmao wang <wang.chang...@gmail.com> wrote: > Just now, I used "admin_key" and "admin_secret" from /etc/riak-cs/app.config > to run "s3cmd -c s3-stock ls s3://stock/XSHE/0/000600" > and I got the below error: > ERROR: Access to bucket 'stock' was denied > > Below is abstract from "/var/log/riak-cs/console.log" > 2015-08-20 18:40:22.790 [debug] > <0.28085.18>@riak_cs_s3_auth:calculate_signature:129 STS: > ["GET","\n",[],"\n",[],"\n","\n",[["x-amz-date",":",<<"Thu, 20 Aug 2015 > 10:40:22 +0000">>,"\n"]],["/stock/",[]]] > 2015-08-20 18:40:32.861 [error] > <0.28153.18>@riak_cs_wm_common:maybe_create_user:223 Retrieval of user > record for s3 failed. Reason: no_user_key > 2015-08-20 18:40:32.861 [debug] > <0.28153.18>@riak_cs_wm_common:post_authentication:452 No user key > 2015-08-20 18:40:32.969 [debug] <0.28189.18>@riak_cs_get_fsm:prepare:406 > Manifest: > {lfs_manifest_v3,3,1048576,{<<"pipeline">>,<<100,97,116,97,121,101,115,47,112,105,112,101,108,105,110,101,47,100,97,116,97,47,114,101,112,111,114,116,47,115,122,47,83,90,48,48,50,49,55,53,67,78,47,50,48,49,48,95,50,48,49,48,45,48,52,45,50,52,95,229,133,172,229,143,184,231,171,160,231,168,139,239,188,136,50,48,49,48,229,185,180,52,230,156,136,239,188,137,46,80,68,70>>},[],"2013-12-16T23:01:12.000Z",<<192,71,150,153,181,181,77,61,186,41,100,32,5,91,197,166>>,255387,<<"application/pdf">>,<<55,41,141,170,187,226,47,223,183,95,105,129,155,154,210,202>>,active,{1387,234872,598819},{1387,234872,918555},[],undefined,undefined,undefined,undefined,{acl_v2,{"pipelinewrite","ef38ca69e145a40c1f8378633994192dace4539339315e6b42d7d1e6e2d2de51","AVG2DHZ4UNUYFAZ8F4WR"},[{{"pipelinewrite","ef38ca69e145a40c1f8378633994192dace4539339315e6b42d7d1e6e2d2de51"},['FULL_CONTROL']},{'AllUsers',['READ']}],{1387,234872,598546}},[],undefined} > 2015-08-20 18:40:33.043 [debug] > <0.28189.18>@riak_cs_lfs_utils:range_blocks:118 InitialBlock: 0, FinalBlock: > 0 > 2015-08-20 18:40:33.043 [debug] > <0.28189.18>@riak_cs_lfs_utils:range_blocks:120 SkipInitial: 0, KeepFinal: > 255387 > 2015-08-20 18:40:33.050 [debug] > <0.28189.18>@riak_cs_get_fsm:waiting_continue_or_stop:229 Block Servers: > [<0.28191.18>] > 2015-08-20 18:40:33.079 [debug] > <0.28189.18>@riak_cs_get_fsm:waiting_chunks:307 Retrieved block > {<<192,71,150,153,181,181,77,61,186,41,100,32,5,91,197,166>>,0} > 2015-08-20 18:40:33.079 [debug] > <0.28189.18>@riak_cs_get_fsm:perhaps_send_to_user:280 Returning block > {<<192,71,150,153,181,181,77,61,186,41,100,32,5,91,197,166>>,0} to client > 2015-08-20 18:40:38.218 [error] > <0.28086.18>@riak_cs_wm_common:maybe_create_user:223 Retrieval of user > record for s3 failed. Reason: no_user_key > 2015-08-20 18:40:38.218 [debug] > <0.28086.18>@riak_cs_wm_common:post_authentication:452 No user key > 2015-08-20 18:40:38.226 [debug] <0.28210.18>@riak_cs_get_fsm:prepare:406 > Manifest: > {lfs_manifest_v3,3,1048576,{<<"pipeline">>,<<100,97,116,97,121,101,115,47,112,105,112,101,108,105,110,101,47,100,97,116,97,47,114,101,112,111,114,116,47,115,104,47,83,72,54,48,48,55,53,48,67,78,47,50,48,48,55,95,50,48,48,55,45,49,49,45,50,49,95,230,177,159,228,184,173,232,141,175,228,184,154,229,133,179,228,186,142,73,66,69,95,53,232,141,175,229,147,129,232,142,183,229,190,151,228,186,140,230,156,159,228,184,180,229,186,138,230,137,185,230,150,135,231,154,132,229,133,172,229,145,138,229,143,138,233,163,142,233,153,169,230,143,144,231,164,186,46,112,100,102>>},[],"2013-12-15T09:04:48.000Z",<<201,247,249,158,95,22,64,242,161,118,253,64,120,187,205,105>>,89863,<<"application/pdf">>,<<139,151,203,173,6,111,222,48,17,81,102,170,216,66,193,77>>,active,{1387,98288,545827},{1387,98288,618409},[],undefined,undefined,undefined,undefined,{acl_v2,{"pipelinewrite","ef38ca69e145a40c1f8378633994192dace4539339315e6b42d7d1e6e2d2de51","AVG2DHZ4UNUYFAZ8F4WR"},[{{"pipelinewrite","ef38ca69e145a40c1f837 8633994192dace4539339315e6b42d7d1e6e2d2de51"},['FULL_CONTROL']},{'AllUsers',['READ']}],{1387,98288,545618}},[],undefined} > 2015-08-20 18:40:38.280 [debug] > <0.28210.18>@riak_cs_lfs_utils:range_blocks:118 InitialBlock: 0, FinalBlock: > 0 > 2015-08-20 18:40:38.280 [debug] > <0.28210.18>@riak_cs_lfs_utils:range_blocks:120 SkipInitial: 0, KeepFinal: > 89863 > 2015-08-20 18:40:38.280 [debug] > <0.28210.18>@riak_cs_get_fsm:waiting_continue_or_stop:229 Block Servers: > [<0.28212.18>] > 2015-08-20 18:40:38.343 [debug] > <0.28210.18>@riak_cs_get_fsm:waiting_chunks:307 Retrieved block > {<<201,247,249,158,95,22,64,242,161,118,253,64,120,187,205,105>>,0} > 2015-08-20 18:40:38.344 [debug] > <0.28210.18>@riak_cs_get_fsm:perhaps_send_to_user:280 Returning block > {<<201,247,249,158,95,22,64,242,161,118,253,64,120,187,205,105>>,0} to > client > > On Thu, Aug 20, 2015 at 6:04 PM, Stanislav Vlasov <stanislav....@gmail.com> > wrote: >> >> 2015-08-20 14:47 GMT+05:00 changmao wang <wang.chang...@gmail.com>: >> >> > what's your meaning of domain name of /etc/riak-cs/app.config and >> > ~/.s3cfg? >> > I guess it's cs_root_host parameter from /etc/riak-cs/app.config and >> > host_base from '~/.s3cfg'. >> > If so, there're same as "api2.cloud-datayes.com". >> >> Yes, is that i mean, but i see, it is not your case >> Try to set {level, debug} in lager_file_backend section for console.log. >> >> > However, I can not ping this host from localhost. >> >> It's ok, if you write proper proxy_host and proxy_port in .s3cfg >> >> > On Thu, Aug 20, 2015 at 5:23 PM, Stanislav Vlasov >> > <stanislav....@gmail.com> >> > wrote: >> >> >> >> 2015-08-20 13:57 GMT+05:00 changmao wang <wang.chang...@gmail.com>: >> >> > somebody watching on this? >> >> >> >> Do you set up same domain in riak-cs.conf and in .s3cfg? >> >> I got such error in this case. >> >> >> >> > On Wed, Aug 19, 2015 at 9:01 AM, changmao wang >> >> > <wang.chang...@gmail.com> >> >> > wrote: >> >> >> >> >> >> Matthew, >> >> >> >> >> >> I used s3cmd --configure to generate ".s3cfg" config file and then >> >> >> access >> >> >> RIAK service by s3cmd. >> >> >> The access_key and secret_key from ".s3cfg" is same as admin_key and >> >> >> admin_secret from "/etc/riak-cs/app.config". >> >> >> >> >> >> However, I got error as below using s3cmd to access one bucket. >> >> >> >> >> >> root@cluster-s3-hd1:~# s3cmd -c /root/.s3cfg ls >> >> >> s3://pipeline/article/111.pdf >> >> >> ERROR: Access to bucket 'pipeline' was denied >> >> >> >> >> >> By the way, I used Riak and Riak-CS 1.4.2 on Ubuntu. Current >> >> >> production >> >> >> cluster is a legacy system without documents for co-workers. >> >> >> >> >> >> Attached file is "s3cfg" generated by "s3cmd --configure". >> >> >> -- >> >> >> Amao Wang >> >> >> Best & Regards >> >> > >> >> > >> >> > >> >> > >> >> > -- >> >> > Amao Wang >> >> > Best & Regards >> >> > >> >> > _______________________________________________ >> >> > riak-users mailing list >> >> > riak-users@lists.basho.com >> >> > http://lists.basho.com/mailman/listinfo/riak-users_lists.basho.com >> >> > >> >> >> >> >> >> >> >> -- >> >> Stanislav >> > >> > >> > >> > >> > -- >> > Amao Wang >> > Best & Regards >> >> >> >> -- >> Stanislav > > > > > -- > Amao Wang > Best & Regards > > _______________________________________________ > riak-users mailing list > riak-users@lists.basho.com > http://lists.basho.com/mailman/listinfo/riak-users_lists.basho.com > -- Kazuhiro Suzuki | Basho Japan KK _______________________________________________ riak-users mailing list riak-users@lists.basho.com http://lists.basho.com/mailman/listinfo/riak-users_lists.basho.com
