{"action":"opened","issue":{"url":"https://api.github.com/repos/scality/S3/issues/882","repository_url":"https://api.github.com/repos/scality/S3","labels_url":"https://api.github.com/repos/scality/S3/issues/882/labels{/name}","comments_url":"https://api.github.com/repos/scality/S3/issues/882/comments","events_url":"https://api.github.com/repos/scality/S3/issues/882/events","html_url":"https://github.com/scality/S3/issues/882","id":252476975,"number":882,"title":"Signed URL Access to EC2(Amazon Linux) returns 403 Forbidden","user":{"login":"shirade","id":8978562,"avatar_url":"https://avatars2.githubusercontent.com/u/8978562?v=4","gravatar_id":"","url":"https://api.github.com/users/shirade","html_url":"https://github.com/shirade","followers_url":"https://api.github.com/users/shirade/followers","following_url":"https://api.github.com/users/shirade/following{/other_user}","gists_url":"https://api.github.com/users/shirade/gists{/gist_id}","starred_url":"https://api.github.com/users/shirade/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/shirade/subscriptions","organizations_url":"https://api.github.com/users/shirade/orgs","repos_url":"https://api.github.com/users/shirade/repos","events_url":"https://api.github.com/users/shirade/events{/privacy}","received_events_url":"https://api.github.com/users/shirade/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-08-24T03:30:29Z","updated_at":"2017-08-24T03:30:29Z","closed_at":null,"body":"### Description\r\nI am running scality/s3server:latest on docker on EC2(Amazon Linux). If I do http request to signed url for `getObject` which is signed by aws-sdk(Javascript), I get 403 Forbidden. I cannot get why it happens if I check `docker logs`. Please help me.\r\n\r\n### Steps to reproduce the issue\r\nI am running scality/s3server:latest on docker on EC2(Amazon Linux).\r\n\r\n```bash\r\n$ docker run -d -p 8000:8000 scality/s3server:latest\r\n$ s3cmd mb s3://sample\r\n$ s3cmd put .bash_history s3://sample/\r\n```\r\n\r\nIf I do http request to signed url for `getObject` which is signed by aws-sdk(Javascript), I get 403 Forbidden.\r\n\r\n```javascript\r\nvar S3 = require('aws-sdk/clients/s3');\r\nvar client = new S3({\r\n  endpoint: '127.0.0.1:8000',\r\n  accessKeyId: 'accessKey1',\r\n  secretAccessKey: 'verySecretKey1',\r\n  s3ForcePathStyle: true,\r\n  sslEnabled: false\r\n});\r\n\r\nclient.getSignedUrl('getObject', {\r\n    Bucket: 'sample',\r\n    Key: '.bash_history',\r\n    Expires: 15 * 60 // 900 sec\r\n  }, console.log);\r\n```\r\n\r\n### Actual result\r\nThen I do http request\r\n\r\n```bash\r\n$ curl 'http://127.0.0.1:8000/sample/.bash_profile?AWSAccessKeyId=accessKey1&Expires=10503544861&Signature=T1LC8xsf7OPyr5rCo44q0tL4mlM%3D'\r\n<?xml version=\"1.0\" encoding=\"UTF-8\"?><Error><Code>AccessDenied</Code><Message>Access Denied</Message><Resource></Resource><RequestId>f54267e60f4c9d98be1a</RequestId></Error>\r\n\r\n$ docker logs s3server | tail\r\n{\"name\":\"S3\",\"bucketName\":\"sample\",\"objectKey\":\".bash_profile\",\"bytesReceived\":0,\"bodyLength\":0,\"bytesSent\":174,\"clientIP\":\"::ffff:172.17.0.1\",\"clientPort\":36540,\"httpMethod\":\"GET\",\"httpURL\":\"/sample/.bash_profile?AWSAccessKeyId=accessKey1&Expires=10503544861&Signature=T1LC8xsf7OPyr5rCo44q0tL4mlM%3D\",\"contentLength\":0,\"httpCode\":403,\"time\":1503544878970,\"req_id\":\"f54267e60f4c9d98be1a\",\"elapsed_ms\":1.483227,\"level\":\"info\",\"message\":\"responded with error XML\",\"hostname\":\"34372aaf829a\",\"pid\":125}\r\n```\r\n\r\nI cannot understand why this happens from this message. What else can I check to solve this problem?\r\n\r\n### Expected result\r\n\r\nExpected result is getting the object file. \r\n\r\n**If I do this on my local Macbook Pro, I can get the object file.**\r\n"}}
{"actor":{"display_login":"shirade"}}