Access Azure blob storage from Web app with unc paths
I currently have an on premise asp.net web application that stores files in a network resource through UNC routes (fileserverstorage$docs...). since the validation is done through Active Directory, I do not have stored credentials on my app and is the IIS service account who have the permission to access the filer.
I am doing a migration test to Azure and I have created a web app service and a blob storage to host my resources, but when I try to access the storage, I receive a permission error to the blob storage route :exception in the application. Access to the path 'teststore.file.core.windows.netappstorage' denied
It is possible to configure the Azure sandbox so that it can work in the same way as in the on premise without having to make changes in my code?
Thank you very much and greetings.
azure web-applications azure-active-directory azure-storage-blobs azure-blob-storage asked Nov 15 '18 at 9:57
David RamosDavid Ramos
1
add a comment |
I currently have an on premise asp.net web application that stores files in a network resource through UNC routes (fileserverstorage$docs...). since the validation is done through Active Directory, I do not have stored credentials on my app and is the IIS service account who have the permission to access the filer.
I am doing a migration test to Azure and I have created a web app service and a blob storage to host my resources, but when I try to access the storage, I receive a permission error to the blob storage route :exception in the application. Access to the path 'teststore.file.core.windows.netappstorage' denied
It is possible to configure the Azure sandbox so that it can work in the same way as in the on premise without having to make changes in my code?
Thank you very much and greetings.
azure web-applications azure-active-directory azure-storage-blobs azure-blob-storage asked Nov 15 '18 at 9:57
David RamosDavid Ramos
1
add a comment |
I currently have an on premise asp.net web application that stores files in a network resource through UNC routes (fileserverstorage$docs...). since the validation is done through Active Directory, I do not have stored credentials on my app and is the IIS service account who have the permission to access the filer.
I am doing a migration test to Azure and I have created a web app service and a blob storage to host my resources, but when I try to access the storage, I receive a permission error to the blob storage route :exception in the application. Access to the path 'teststore.file.core.windows.netappstorage' denied
It is possible to configure the Azure sandbox so that it can work in the same way as in the on premise without having to make changes in my code?
Thank you very much and greetings.
azure web-applications azure-active-directory azure-storage-blobs azure-blob-storage asked Nov 15 '18 at 9:57
David RamosDavid Ramos
1
I currently have an on premise asp.net web application that stores files in a network resource through UNC routes (fileserverstorage$docs...). since the validation is done through Active Directory, I do not have stored credentials on my app and is the IIS service account who have the permission to access the filer.
I am doing a migration test to Azure and I have created a web app service and a blob storage to host my resources, but when I try to access the storage, I receive a permission error to the blob storage route :exception in the application. Access to the path 'teststore.file.core.windows.netappstorage' denied
It is possible to configure the Azure sandbox so that it can work in the same way as in the on premise without having to make changes in my code?
Thank you very much and greetings.
azure web-applications azure-active-directory azure-storage-blobs azure-blob-storage azure web-applications azure-active-directory azure-storage-blobs azure-blob-storage asked Nov 15 '18 at 9:57
David RamosDavid Ramos
1
asked Nov 15 '18 at 9:57
David RamosDavid Ramos
1
asked Nov 15 '18 at 9:57
David RamosDavid Ramos
1
asked Nov 15 '18 at 9:57
David RamosDavid Ramos
1
asked Nov 15 '18 at 9:57
David RamosDavid Ramos
1
1
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
This isn't possible currently I'm afraid. Azure Files expects you to provide the storage key to authenticate to the share. There is a preview for using AD accounts to access Azure Files (using Azure AD Domain Services) but this wouldn't help you here, as your web app would need to be domain joined, which is not possible.
FYI your not using Blob here, your using files which sits on top of Blob. Actual blob storage also has a preview of using Azure AD accounts to access it, but this would entail you changing your code to make blob calls.
Either way, it would be a code change.
answered Nov 15 '18 at 11:09
Sam CoganSam Cogan
2,08263063
you can enable managed identity on webapp so it should be possible using Azure AD account???
– Thomas
Nov 16 '18 at 10:27
1
Talking to blob storage using managed identity should be possible, but would still require code changes to talk directly to blob. Files, however, is not AAD, it is a hybrid approach using AAD DS, user needs to exist in AAD DS and managed identities do not get synced.
– Sam Cogan
Nov 16 '18 at 10:29
Thanks for the explanation, it makes sense :-)
– Thomas
Nov 16 '18 at 10:30
add a comment |
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53316745%2faccess-azure-blob-storage-from-web-app-with-unc-paths%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
This isn't possible currently I'm afraid. Azure Files expects you to provide the storage key to authenticate to the share. There is a preview for using AD accounts to access Azure Files (using Azure AD Domain Services) but this wouldn't help you here, as your web app would need to be domain joined, which is not possible.
FYI your not using Blob here, your using files which sits on top of Blob. Actual blob storage also has a preview of using Azure AD accounts to access it, but this would entail you changing your code to make blob calls.
Either way, it would be a code change.
answered Nov 15 '18 at 11:09
Sam CoganSam Cogan
2,08263063
you can enable managed identity on webapp so it should be possible using Azure AD account???
– Thomas
Nov 16 '18 at 10:27
1
Talking to blob storage using managed identity should be possible, but would still require code changes to talk directly to blob. Files, however, is not AAD, it is a hybrid approach using AAD DS, user needs to exist in AAD DS and managed identities do not get synced.
– Sam Cogan
Nov 16 '18 at 10:29
Thanks for the explanation, it makes sense :-)
– Thomas
Nov 16 '18 at 10:30
add a comment |
This isn't possible currently I'm afraid. Azure Files expects you to provide the storage key to authenticate to the share. There is a preview for using AD accounts to access Azure Files (using Azure AD Domain Services) but this wouldn't help you here, as your web app would need to be domain joined, which is not possible.
FYI your not using Blob here, your using files which sits on top of Blob. Actual blob storage also has a preview of using Azure AD accounts to access it, but this would entail you changing your code to make blob calls.
Either way, it would be a code change.
answered Nov 15 '18 at 11:09
Sam CoganSam Cogan
2,08263063
you can enable managed identity on webapp so it should be possible using Azure AD account???
– Thomas
Nov 16 '18 at 10:27
1
Talking to blob storage using managed identity should be possible, but would still require code changes to talk directly to blob. Files, however, is not AAD, it is a hybrid approach using AAD DS, user needs to exist in AAD DS and managed identities do not get synced.
– Sam Cogan
Nov 16 '18 at 10:29
Thanks for the explanation, it makes sense :-)
– Thomas
Nov 16 '18 at 10:30
add a comment |
This isn't possible currently I'm afraid. Azure Files expects you to provide the storage key to authenticate to the share. There is a preview for using AD accounts to access Azure Files (using Azure AD Domain Services) but this wouldn't help you here, as your web app would need to be domain joined, which is not possible.
FYI your not using Blob here, your using files which sits on top of Blob. Actual blob storage also has a preview of using Azure AD accounts to access it, but this would entail you changing your code to make blob calls.
Either way, it would be a code change.
answered Nov 15 '18 at 11:09
Sam CoganSam Cogan
2,08263063
This isn't possible currently I'm afraid. Azure Files expects you to provide the storage key to authenticate to the share. There is a preview for using AD accounts to access Azure Files (using Azure AD Domain Services) but this wouldn't help you here, as your web app would need to be domain joined, which is not possible.
FYI your not using Blob here, your using files which sits on top of Blob. Actual blob storage also has a preview of using Azure AD accounts to access it, but this would entail you changing your code to make blob calls.
Either way, it would be a code change.
answered Nov 15 '18 at 11:09
Sam CoganSam Cogan
2,08263063
answered Nov 15 '18 at 11:09
Sam CoganSam Cogan
2,08263063
answered Nov 15 '18 at 11:09
Sam CoganSam Cogan
2,08263063
answered Nov 15 '18 at 11:09
Sam CoganSam Cogan
2,08263063
2,08263063
you can enable managed identity on webapp so it should be possible using Azure AD account???
– Thomas
Nov 16 '18 at 10:27
1
Talking to blob storage using managed identity should be possible, but would still require code changes to talk directly to blob. Files, however, is not AAD, it is a hybrid approach using AAD DS, user needs to exist in AAD DS and managed identities do not get synced.
– Sam Cogan
Nov 16 '18 at 10:29
Thanks for the explanation, it makes sense :-)
– Thomas
Nov 16 '18 at 10:30
add a comment |
you can enable managed identity on webapp so it should be possible using Azure AD account???
– Thomas
Nov 16 '18 at 10:27
1
Talking to blob storage using managed identity should be possible, but would still require code changes to talk directly to blob. Files, however, is not AAD, it is a hybrid approach using AAD DS, user needs to exist in AAD DS and managed identities do not get synced.
– Sam Cogan
Nov 16 '18 at 10:29
Thanks for the explanation, it makes sense :-)
– Thomas
Nov 16 '18 at 10:30
you can enable managed identity on webapp so it should be possible using Azure AD account???
– Thomas
Nov 16 '18 at 10:27
you can enable managed identity on webapp so it should be possible using Azure AD account???
– Thomas
Nov 16 '18 at 10:27
1
1
Talking to blob storage using managed identity should be possible, but would still require code changes to talk directly to blob. Files, however, is not AAD, it is a hybrid approach using AAD DS, user needs to exist in AAD DS and managed identities do not get synced.
– Sam Cogan
Nov 16 '18 at 10:29
Talking to blob storage using managed identity should be possible, but would still require code changes to talk directly to blob. Files, however, is not AAD, it is a hybrid approach using AAD DS, user needs to exist in AAD DS and managed identities do not get synced.
– Sam Cogan
Nov 16 '18 at 10:29
Thanks for the explanation, it makes sense :-)
– Thomas
Nov 16 '18 at 10:30
Thanks for the explanation, it makes sense :-)
– Thomas
Nov 16 '18 at 10:30
add a comment |
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53316745%2faccess-azure-blob-storage-from-web-app-with-unc-paths%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
