Skip to content

Commit fd9ed67

Browse files
authored
Revise section headings and restore networking details
Updated section headings for consistency and clarity. Added networking section back with relevant details.
1 parent 0348a6e commit fd9ed67

1 file changed

Lines changed: 10 additions & 10 deletions

File tree

articles/storage/blobs/secure-file-transfer-protocol-known-issues.md

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -55,32 +55,32 @@ To transfer files to or from Azure Blob Storage via SFTP clients, see the follow
5555
| Cross Container Operations | Traversing between containers or performing operations on multiple containers from the same connection are unsupported.
5656
| Undelete | There is no way to restore a soft-deleted blob with SFTP. The `Undelete` REST API must be used.|
5757

58-
## Authentication and authorization
58+
## Authentication and Authorization
5959

6060
- _Local users_ are the only form of identity management that is currently supported for the SFTP endpoint.
6161

6262
- Microsoft Entra ID isn't supported for the SFTP endpoint.
6363

6464
To learn more, see [SFTP permission model](secure-file-transfer-protocol-support.md#sftp-permission-model) and see [Access control model in Azure Data Lake Storage](data-lake-storage-access-control-model.md).
6565

66-
## Networking
67-
68-
- To access the storage account using SFTP, your network must allow traffic on port 22.
69-
70-
- Static IP addresses aren't supported for storage accounts. This isn't an SFTP specific limitation.
71-
72-
- There's a 2-minute time out for idle or inactive connections. OpenSSH will appear to stop responding and then disconnect. Some clients reconnect automatically.
73-
7466
### Access ACLs and Default ACLs
7567

7668
- SFTP doesn't currently support **Default ACLs** or additional **Access ACLs** (ACL entries beyond the POSIX `user::`, `group::`, and `other::` entries, such as named users or named groups).
7769

7870
- If any directory in the access path (including the user's home directory) has Default ACLs or additional Access ACLs set, SFTP operations will fail with `Permission denied`, even when the connecting user has required permissions.
7971

80-
**Temporary Workaround:** Remove Default ACLs and additional Access ACLs from all directories in the SFTP access path (including the user's home directory) so that only POSIX `user::`, `group::`, and `other::` entries remain.
72+
**Workaround:** Remove Default ACLs and additional Access ACLs from all directories in the SFTP access path (including the user's home directory) so that only POSIX `user::`, `group::`, and `other::` entries remain.
8173

8274
For more details about ACLs and how you can edit them, see [Access control lists (ACLs)](data-lake-storage-access-control.md).
8375

76+
## Networking
77+
78+
- To access the storage account using SFTP, your network must allow traffic on port 22.
79+
80+
- Static IP addresses aren't supported for storage accounts. This isn't an SFTP specific limitation.
81+
82+
- There's a 2-minute time out for idle or inactive connections. OpenSSH will appear to stop responding and then disconnect. Some clients reconnect automatically.
83+
8484
## Other
8585

8686
- For performance issues and considerations, see [SSH File Transfer Protocol (SFTP) performance considerations in Azure Blob storage](secure-file-transfer-protocol-performance.md).

0 commit comments

Comments
 (0)