none
SQL Resource Provider Installation Fails on ASDK 1.0.171122.1

    Question

  • The provider installation script errors out when attempting to establish the New-PSSession with AzS-ERCS01, connectivity to the machine is fine as I can establish the connection by manually running New-PSSession. Appears not to be passing the credentials, any guidance appreciated, log content below:

    New-PSSession : [AzS-ERCS01] Connecting to remote server AzS-ERCS01 failed with the following error message : Access is
    denied. For more information, see the about_Remote_Troubleshooting Help topic.
    At C:\TEMP\SQLRP\Prerequisites\Common\Common.psm1:1276 char:31
    + ... inSession = New-PSSession -ComputerName $PrivilegedEndpoint -Credenti ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [New-PSSession],
    PSRemotingTransportException
        + FullyQualifiedErrorId : AccessDenied,PSSessionOpenFailed
    New-PSSession : [AzS-ERCS01] Connecting to remote server AzS-ERCS01 failed with the following error message : Access is denied. For more information, see the about_Remote_Troubleshooting Help topic.
    At C:\TEMP\SQLRP\Prerequisites\Common\Common.psm1:1276 char:31
    + ... inSession = New-PSSession -ComputerName $PrivilegedEndpoint -Credenti ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [New-PSSession], PSRemotingTransportException
        + FullyQualifiedErrorId : AccessDenied,PSSessionOpenFailed
    PS>TerminatingError(Invoke-Command): "Cannot validate argument on parameter 'Session'. The argument is null or empty. Provide an argument that is not null or empty, and then try the command again."
    >> TerminatingError(Get-AzureStackStampInfo): "Cannot validate argument on parameter 'Session'. The argument is null or empty. Provide an argument that is not null or empty, and then try the command again."
    >> TerminatingError(Get-AzureStackStampInfo): "Cannot validate argument on parameter 'Session'. The argument is null or empty. Provide an argument that is not null or empty, and then try the command again."
    >> TerminatingError(DeploySQLProvider.ps1): "The running command stopped because the preference variable "ErrorActionPreference" or common parameter is set to Stop: Cannot validate argument on parameter 'Session'. The argument is null or empty. Provide an argument that is not null or empty, and then try the command again."
    **********************
    Windows PowerShell transcript end
    End time: 20171207064748
    **********************

    Thursday, December 07, 2017 12:50 PM

All replies

  • Hello John,

    Are you running the SQL RP install script as AzureStack\CloudAdmin or AzureStack\AzureSTackAdmin?

     

    Can you try rerunning the SQL RP script as AzureStack\CloudAdmin and see if completes successfully.

     

    We apologize for any inconvenience and appreciate your time and interest in Azure Stack.

    If you experience any issues with Azure Stack or the current ASDK release, please feel free to contact us.

         

     Thanks


    Gary Gallanes

    Thursday, December 07, 2017 7:03 PM
    Moderator
  • Also see: Development kit release notes

    Identity

    In Azure Active Directory Federation Services (ADFS) deployed environments, the azurestack\azurestackadmin account is no longer the owner of the Default Provider Subscription. Instead of logging into the Admin portal / adminmanagement endpoint with the azurestack\azurestackadmin, you can use the azurestack\cloudadmin account, so that you can manage and use the Default Provider Subscription.+

    Important+

    Even the azurestack\cloudadmin account is the owner of the Default Provider Subscription in ADFS deployed environments, it does not have permissions to RDP into the host. Continue to use the azurestack\azurestackadmin account or the local administrator account to login, access and manage the host as needed.


    Gary Gallanes

    Thursday, December 07, 2017 7:10 PM
    Moderator
  • Gary, tried running as azurestack\cloudadmin context and that did not work, same error. Hoping that I understood your suggestion correctly, I did the following:

    • Configured Cloudadmin account for remote access
    • Joined Cloudadmin to the Domain Admins group so we can run ICE as Administrator
    • executed the script

    If I got your suggestion wrong please correct me.

    thanks,

    John

    Thursday, December 07, 2017 10:16 PM
  • Recycling this back to the top, the script continues to fail running as Azurestack\cloudadmin. As an FYI this is configured as AAD not ADFS. See log below, any suggestions would be much appreciated. 

    **********************
    Windows PowerShell transcript start
    Start time: 20171212070809
    Username: AZURESTACK\CloudAdmin
    RunAs User: AZURESTACK\CloudAdmin
    Machine: ASDK1 (Microsoft Windows NT 10.0.14393.0)
    Host Application: C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell_ISE.exe
    Process ID: 10684
    PSVersion: 5.1.14393.1884
    PSEdition: Desktop
    PSCompatibleVersions: 1.0, 2.0, 3.0, 4.0, 5.0, 5.1.14393.1884
    BuildVersion: 10.0.14393.1884
    CLRVersion: 4.0.30319.42000
    WSManStackVersion: 3.0
    PSRemotingProtocolVersion: 2.3
    SerializationVersion: 1.1.0.1
    **********************
    Transcript started, output file is C:\TEMP\SQLRP\Logs\DeploySQLProvider.ps1_20171212-070808.txt
    VERBOSE: 7:08:09 AM :
    VERBOSE: 7:08:09 AM : *************************************************
    VERBOSE: 7:08:09 AM : *Executing Script DeploySQLProvider.ps1 1.1.10.0*
    VERBOSE: 7:08:09 AM : *************************************************
    VERBOSE: PSBoundParameter are:
    VERBOSE: {
        "AzCredential":  {
                             "UserName":  "cloudadmin@azurestack.local",
                             "Password":  {
                                              "Length":  5
                                          }
                         },
        "VMLocalCredential":  {
                                  "UserName":  "sqlrpadmin",
                                  "Password":  {
                                                   "Length":  9
                                               }
                              },
        "CloudAdminCredential":  {
                                     "UserName":  "AzureStack\\cloudadmin",
                                     "Password":  {
                                                      "Length":  5
                                                  }
                                 },
        "PrivilegedEndpoint":  "AzS-ERCS01",
        "DefaultSSLCertificatePassword":  {
                                              "Length":  5
                                          },
        "DependencyFilesLocalPath":  "C:\\TEMP\\SQLRP\\cert"
    }
    VERBOSE: 7:08:09 AM :
    VERBOSE: 7:08:09 AM : ************************************************
    VERBOSE: 7:08:09 AM : *Checking for Azure Stack Powershell Module ...*
    VERBOSE: 7:08:09 AM : ************************************************
    Nuget Package provider found.
    Azure Powershell Module with 1.2.11 version found. Continuing ....
    Azurestack Admin  Powershell Module with 1.2.11 version found. Continuing ....
    VERBOSE: 7:08:09 AM :
    VERBOSE: 7:08:09 AM : ***************************
    VERBOSE: 7:08:09 AM : *Validating the parameters*
    VERBOSE: 7:08:09 AM : ***************************
    VERBOSE: Current trusted root: *
    New-PSSession : [AzS-ERCS01] Connecting to remote server AzS-ERCS01 failed with the following error message : Access is
    denied. For more information, see the about_Remote_Troubleshooting Help topic.
    At C:\TEMP\SQLRP\Prerequisites\Common\Common.psm1:1276 char:31
    + ... inSession = New-PSSession -ComputerName $PrivilegedEndpoint -Credenti ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [New-PSSession],
    PSRemotingTransportException
        + FullyQualifiedErrorId : AccessDenied,PSSessionOpenFailed
    New-PSSession : [AzS-ERCS01] Connecting to remote server AzS-ERCS01 failed with the following error message : Access is denied. For more information, see the
    about_Remote_Troubleshooting Help topic.
    At C:\TEMP\SQLRP\Prerequisites\Common\Common.psm1:1276 char:31
    + ... inSession = New-PSSession -ComputerName $PrivilegedEndpoint -Credenti ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [New-PSSession], PSRemotingTransportException
        + FullyQualifiedErrorId : AccessDenied,PSSessionOpenFailed
    PS>TerminatingError(Invoke-Command): "Cannot validate argument on parameter 'Session'. The argument is null or empty. Provide an argument that is not null or empty, and then try the command again."
    >> TerminatingError(Get-AzureStackStampInfo): "Cannot validate argument on parameter 'Session'. The argument is null or empty. Provide an argument that is not null or empty, and then try the command again."
    >> TerminatingError(Get-AzureStackStampInfo): "Cannot validate argument on parameter 'Session'. The argument is null or empty. Provide an argument that is not null or empty, and then try the command again."
    >> TerminatingError(DeploySQLProvider.ps1): "The running command stopped because the preference variable "ErrorActionPreference" or common parameter is set to Stop: Cannot validate argument on parameter 'Session'. The argument is null or empty. Provide an argument that is not null or empty, and then try the command again."
    **********************
    Windows PowerShell transcript end
    End time: 20171212070811
    **********************

    Tuesday, December 12, 2017 12:59 PM