14,494 questions
Operating system error 5(Access is denied.).
You get a clear error message: Access denied, the SQL Server service account don't have permission th write to the destination.
Backup Database with Mirror To fails with "Cannot open backup device 's3://my.domain.com/bucket/some-filder/db.bak'. Operating system error 5(Access is denied.)."
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(233.6, 63%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
Stofer Stephan
1
Reputation point
Using a containerised MSSQL Server 2022 we want to backup our database to URL for S3-compatible object storage and mirror the backup to the same bucket but different path. As soon we add the Mirror to URL option, the statement fails with "Cannot open backup device 's3://my.domain.com/bucket/some-filder/db-mirror.bak'. Operating system error 5(Access is denied.).". The mentioned Url is the one from the MIRROR TO URL option. The access rights on S3 are correct. We are able to back up to both destinations separately, when omitting the "MIRROR TO URL" option.
Our Statement:
BACKUP DATABASE $db_name TO URL = '$target' MIRROR TO URL = '$target_mirror' WITH FORMAT, COMPRESSION, STATS;
both targets points to same bucket but different paths.
the errorlog on /var/opt/mssql/log shows
2023-09-19 06:57:55.48 spid53 Error: 18204, Severity: 16, State: 1. 2023-09-19 06:57:55.48 spid53 BackupDiskFile::CreateMedia: Backup device 's3://my.domain.com/bucket/some-filder/db-mirror.bak' failed to create. Operating system error 5(Access is denied.). 2023-09-19 06:57:55.50 Backup Error: 3041, Severity: 16, State: 1. 2023-09-19 06:57:55.50 Backup BACKUP failed to complete the command BACKUP DATABASE DATABASE_NAME. Check the backup application log for detailed messages.
Any idea whats wrong? Where can I find the application log on the linux container?
SQL Server Other
{count} votes
-
Erland Sommarskog 121.4K Reputation points MVP Volunteer Moderator2023-09-20T21:39:05.75+00:00 I assume that both target and mirror are S3? What happens if you try some other location on the mirror?
I have no clue, but it sounds a little like there is some limit on some channel, so when you try to use two, one locks out the other.
Sign in to comment
2 answers
Sort by: Most helpful
-
Olaf Helper 47,436 Reputation points2023-09-19T08:35:16.68+00:00 -
Stofer Stephan 1 Reputation point
2023-09-19T09:05:43.31+00:00 Thank you for your fast feedback. I noticed the error message but I'm not getting any wiser. The issue is, that the service account is able to write to the
$target_mirrorwhen theMIRROR TO URL-Option is not set. Just the combination leads to the errorworks:
BACKUP DATABASE $db_name TO URL = '$target_mirror' WITH FORMAT, COMPRESSION, STATS;BACKUP DATABASE $db_name TO URL = '$target' WITH FORMAT, COMPRESSION, STATS;dont work:
BACKUP DATABASE $db_name TO URL = '$target_mirror' MIRROR TO URL = '$target' WITH FORMAT, COMPRESSION, STATS;BACKUP DATABASE $db_name TO URL = '$target' MIRROR TO URL = '$target_mirror' WITH FORMAT, COMPRESSION, STATS;
Sign in to comment -
-
ZoeHui-MSFT 41,491 Reputation points2023-09-20T06:00:40.7966667+00:00 Hi @Stofer Stephan,
both targets points to same bucket but different paths.
BackupDiskFile::CreateMedia: Backup device 's3://my.domain.com/bucket/some-filder/db-mirror.bak' failed to create. Operating system error 5(Access is denied.).
Please double check the account has full permission to access the device.
Regards，
Zoe Hui
If the answer is helpful, please click "Accept Answer" and upvote it.
-
Stofer Stephan 1 Reputation point
2023-09-20T12:31:59.23+00:00 even if I provide full access, the same failure occurs.
Sign in to comment -