技术文章 - CS377344

在 Windchill PDMLink 中使用 MSI 身份验证策略对 Azure Blob 进行多个订阅时,获取 sas 令牌时出现错误

已修改: 25-Sep-2025   


注意:本文已使用机器翻译软件翻译,以方便非英语客户阅读。但翻译内容可能包含语法错误或不准确之处。请注意, PTC对本文所含信息的翻译准确性及使用后果不承担任何责任。请在 此处 查看本文的英文原始版本以便参考。有关机器翻译的更多详情,请单击 此处
感谢您告诉我们。我们将尽快审阅此译文。

适用于

  • Windchill PDMLink 12.0 to 12.1

说明

使用 MSI 身份验证策略对 Azure Blob 进行多个订阅时,获取 sas 令牌时会引发错误
方法服务器日志中打印了以下错误:
date/time ERROR [] com.ptc.windchill.objectstorage.azureblob.BlobUtilities wcadmin - Error while fetching sas token. Received below response:-

{"error":{"code":"AuthorizationFailed","message":"The client 'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx' with object id xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx' does not have authorization to perform action 'Microsoft.Storage/storageAccounts/listServiceSas/action' over scope '/subscriptions/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/resourceGroups/null/providers/Microsoft.Storage/storageAccounts/vcsprdeuw' or the scope is invalid. If access was recently granted, please refresh your credentials."}}

date/time ERROR []Exception caught. (com.ptc.windchill.objectstorage.azureblob.blobResource/FAILURE_FETCHING_SAS_TOKEN) com.ptc.windchill.objectstorage.azureblob.exception.BlobException: Failed to fetch 'Shared Access Signature' for blob "/blob/vcsprdeuw/vcsblob/xxxxxxxxxxxxxx/522/output_522.zip". Check server logs for more details. at com.ptc.windchill.objectstorage.azureblob.BlobUtilities.fetchSASToken(BlobUtilities.java:412)
这是文章 377344 的 PDF 版本,可能已过期。最新版本 CS377344