locked
Azure Stack TP2 Error Step 60.120.124 RRS feed

  • Question

  • 1. I used windows' account [azurestack\administrator] to run script [InstallAzureStackPOC.ps1]
    2. I used AAD user account with Global administrator rights to login in when I was running InstallAzureStackPOC.ps1 script.
    3. The command like below.
    .\InstallAzureStackPOC.ps1 -AdminPassword $adminpass -AADAdminCredential $aadcred -NatIPv4Subnet 10.10.10.0/24 -NatIPv4Address 10.10.10.3 -NatIPv4DefaultGateway 10.10.10.1

    But It stopped on step 60.120.124 always.

    I found some [TODO] comment in this file [C:\CloudDeployment\Configuration\Roles\Fabric\AAD\Role.xml]
    It likes below:
    ------------------------------
      <PublicInfo>
        <Logs>
          <FileLog Location="$env:SystemDrive\Logs\"/>
        </Logs>
        <!--TODO: Customer needs to change this to match their AAD configuration -->
        <!--Name corresponds to Domain Name in the Old Azure Management Portal, https://manage.windowsazure.com  -->
        <!--ID corresponds to https://login.microsoftonline.com/{Id}/federationmetadata/2007-06/federationmetadata.xml -->
        <!--The above endpoint can be found from Azure Management Portal -> Directory -> App Endpoints -->
        <!--NOTE: This should be an optional step once we configure Azure Stack with ADFS -->
        <AADTenant>
          <Name>[AADDirectoryTenantName]</Name>
          <Id>[AADDirectoryTenantID]</Id>
          <SubscriptionOwner>[AADSubscriptionOwner]</SubscriptionOwner>
          <UniqueName>[AADSubscriptionOwner]</UniqueName>
        </AADTenant>
      </PublicInfo>
    ------------------------------

    Should I change that value of <name>/<Id>/<SubscriptionOwner> and <UniqueName>?
    Any idea?

    log file say:
    ---------------------------
    -<Step EndTimeUtc="2016-10-13T06:48:26.7950891Z" Status="Error" StartTimeUtc="2016-10-13T06:46:59.0905609Z" Description="Configures Azure Stack with Azure AD." Name="(Katal) Azure Stack AAD Configuration." Index="124">

    -<Task EndTimeUtc="2016-10-13T06:48:26.7950891Z" Status="Error" StartTimeUtc="2016-10-13T06:46:59.0905609Z" RolePath="Cloud\Fabric\AAD" InterfaceType="Configure">
    -<Exception>
    <Message>Function 'ConfigureAAD' in module 'Roles\AAD\AAD.psd1' raised an exception: user_realm_discovery_failed: User realm discovery failed at <ScriptBlock>, <No file>: line 280</Message>
    <StackTrace> at CloudEngine.Actions.PowerShellHost.Invoke(InterfaceParameters parameters, Object legacyConfigurationObject, CancellationToken token) at CloudEngine.Actions.InterfaceTask.Invoke(Configuration roleConfiguration, Object legacyConfigurationObject, MultiLevelIndexRange indexRange, CancellationToken token)</StackTrace>
    <Raw>CloudEngine.Actions.InterfaceInvocationFailedException: Function 'ConfigureAAD' in module 'Roles\AAD\AAD.psd1' raised an exception: user_realm_discovery_failed: User realm discovery failed at <ScriptBlock>, <No file>: line 280 at CloudEngine.Actions.PowerShellHost.Invoke(InterfaceParameters parameters, Object legacyConfigurationObject, CancellationToken token) at CloudEngine.Actions.InterfaceTask.Invoke(Configuration roleConfiguration, Object legacyConfigurationObject, MultiLevelIndexRange indexRange, CancellationToken token)</Raw>
    </Exception>
    </Task>
    </Step>
    ---------------------------
    Thursday, October 13, 2016 7:36 AM

Answers

  • This issue has been solved.
    In my case, I had never set value of EnvironmentDNS parameter.
    Installation was completed when I added the EnvironmentDNS.
    Command is like below...
    Hope it can help someone.

    ------------------------------------------------------------------
    $adminpass = ConvertTo-SecureString "xxxxxx" -AsPlainText -Force
    $aadpass = ConvertTo-SecureString "aaaaaa" -AsPlainText -Force
    $aadcred = New-Object System.Management.Automation.PSCredential ("zzzzzzz@xxxxxxx.onmicrosoft.com", $aadpass)
    
    .\InstallAzureStackPOC.ps1 -AdminPassword $adminpass -AADAdminCredential $aadcred -NatIPv4Subnet xxx.xxx.xxx.xxx/xx -NatIPv4Address xxx.xxx.xxx.xxx -NatIPv4DefaultGateway xxx.xxx.xxx.xxx -EnvironmentDNS xxx.xxx.xxx.xxx

    • Marked as answer by Aaron.ZL Wednesday, October 26, 2016 7:26 AM
    Wednesday, October 26, 2016 7:26 AM

All replies

  • Hello,

    We are checking on the query and would get back to you soon on this.

    Apologize for the inconvenience and appreciate your time and patience in this matter.

     

    Regards,

    Ashok

    Friday, October 14, 2016 3:36 AM
  • Experiencing the same error
    Friday, October 14, 2016 8:45 PM
  • You do not need to edit that section of the code as the script will correctly get the correct information.  Can you confirm that you are using a Work or School account and not a Microsoft Account as defined here: https://azure.microsoft.com/en-us/documentation/articles/sign-up-organization/.  Additionally if you are trying to use a Microsoft Account you can instead create an admin account in the Azure Active Directory (AAD) that you have provisioned to use for you Azure Stack Deployment.  For example an admin@<yourdomain>.onmicrosoft.com and make it a Global Admin of that directory.  Login once with that account to set a permanent password and then kick off your install. 

    Thanks,

    -Steve


    Steve Linehan | Principal Program Manager | Microsoft Enterprise Cloud Group

    Saturday, October 15, 2016 12:44 AM
  • I used MS account and created xxxx@<mydomain>.onmicrosoft.com and make it a Global Admin of that directory too.
    If not, install should be stopped before STEP 60.120.124, right?
    I have reinstalled it from STEP 60.120.123, and got the below same error.
    any idea?
    thanks.

    --Command--
    Import-Module C:\CloudDeployment\CloudDeployment.psd1 -Force
    Import-Module C:\CloudDeployment\ECEngine\EnterpriseCloudEngine.psd1 -Force
    Invoke-EceAction -RolePath Cloud -ActionType Deployment -Start 60.120.123 -Verbose

    --Error log--

    ...
    VERBOSE: 1> 3> Interface: Interface Configure completed. - 10/16/2016 5:36:02 PM
    COMPLETE: Task Cloud\Fabric\ADFS - Configure
    VERBOSE: 1> 3> Task: Task completed. - 10/16/2016 5:36:02 PM
    COMPLETE: Step 127 - (Katal) Configure ADFS
    VERBOSE: 1> 3> Step: Status of step '(Katal) Configure ADFS' is 'Success'. - 10/16/2016 5:36:02 PM
    VERBOSE: 1> 3> Action: Action plan 'Deployment-Phase4-DeployADFS' completed. - 10/16/2016 5:36:02 PM
    COMPLETE: Action 'Deployment-Phase4-DeployADFS'
    VERBOSE: 1> 3> Action: Status of 'Deployment-Phase4-DeployADFS' is 'Success'. - 10/16/2016 5:36:02 PM
    COMPLETE: Task Cloud - Deployment-Phase4-DeployADFS
    VERBOSE: 1> 3> Task: Status of action 'Deployment-Phase4-DeployADFS' of role 'Cloud' is 'Success'. - 10/16/2016 5:36:02 PM
    VERBOSE: 1> 2> & : END on WIN-VDSRGTVT8PH as AZURESTACK\AzureStackAdmin - 10/16/2016 5:37:42 PM
    VERBOSE: 1> 2> Interface: Interface Configure completed. - 10/16/2016 5:37:42 PM
    COMPLETE: Task Cloud\Fabric\WAS - Configure
    VERBOSE: 1> 2> Task: Task completed. - 10/16/2016 5:37:42 PM
    COMPLETE: Step 123 - (Katal) Configure WAS VMs
    VERBOSE: 1> 2> Step: Status of step '(Katal) Configure WAS VMs' is 'Success'. - 10/16/2016 5:37:42 PM
    STARTING: Step 124 - (Katal) Azure Stack AAD Configuration.
    VERBOSE: 1> 2> Step: Running step 124 - (Katal) Azure Stack AAD Configuration. - 10/16/2016 5:37:42 PM
    STARTING: Task Cloud\Fabric\AAD - Configure
    VERBOSE: 1> 2> Task: Running interface 'Configure' of role 'Cloud\Fabric\AAD'. - 10/16/2016 5:37:42 PM
    VERBOSE: 1> 2> Interface: Path to module: C:\CloudDeployment\Roles\AAD\AAD.psd1 - 10/16/2016 5:37:42 PM
    VERBOSE: 1> 2> Interface: Running interface Configure (Roles\AAD\AAD.psd1, ConfigureAAD) - 10/16/2016 5:37:42 PM
    VERBOSE: 1> 2> & : BEGIN on WIN-VDSRGTVT8PH as AZURESTACK\AzureStackAdmin - 10/16/2016 5:37:45 PM
    VERBOSE: 1> 2> & DirectoryTenantID: xxxxxxxx-xxx-xxxx-xxxx-xxxxxxxx - 10/16/2016 5:37:45 PM
    VERBOSE: 1> 2> & [PSCredential]DomainAdmin: AzureStack\FabricAdmin - 10/16/2016 5:37:45 PM
    VERBOSE: 1> 2> & AzureEnvironment: AzureCloud - 10/16/2016 5:37:45 PM
    VERBOSE: 1> 2> & AAD Admin User: xxxx@xxxxxxxx.onmicrosoft.com, UniqueNameClaim: xxxx@xxxxxxxx.onmicrosoft.com - 10/16/2016 5:37:45 PM
    VERBOSE: 1> 2> & SqlServer: MAS-WAP-HA\MASSqlWAP - 10/16/2016 5:37:45 PM
    VERBOSE: 1> 2> & KeyVaultResourceId: https://vault.azurestack.local/xxxxxxxx-xxxx-xxxx-xxxx-a561137cc26b, KeyVaultEndpointTemplate: https://{0}.vault.azurestack.local -
    10/16/2016 5:37:45 PM
    VERBOSE: 1> 2> & ArmEndpoint: https://api.AzureStack.local - 10/16/2016 5:37:45 PM
    VERBOSE: 1> 2> & : Invoking command on MAS-WAS01 as AzureStack\FabricAdmin - 10/16/2016 5:37:46 PM
    Invoke-EceAction : 1> 2> Task: Invocation of interface 'Configure' of role 'Cloud\Fabric\AAD' failed:
    Function 'ConfigureAAD' in module 'Roles\AAD\AAD.psd1' raised an exception:
    user_realm_discovery_failed: User realm discovery failed
    at <ScriptBlock>, <No file>: line 280 - 10/16/2016 5:38:22 PM
    At line:1 char:1
    + Invoke-EceAction -RolePath Cloud -ActionType Deployment -Start 60.120 ...
    + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : NotSpecified: (:) [Invoke-EceAction], Exception
        + FullyQualifiedErrorId : Microsoft.IdentityModel.Clients.ActiveDirectory.AdalServiceException,Microsoft.AzureStack.Commands.Security.GetToken,CloudEngine.Cmdlets.InvokeCmdlet
    
    VERBOSE: 1> 2> Step: Status of step '(Katal) Azure Stack AAD Configuration.' is 'Error'. - 10/16/2016 5:38:22 PM
    Invoke-EceAction : 1> 2> Action: Invocation of step 60.120.124 failed. Stopping invocation of action plan. - 10/16/2016 5:38:22 PM
    At line:1 char:1
    + Invoke-EceAction -RolePath Cloud -ActionType Deployment -Start 60.120 ...
    + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : InvalidOperation: (:) [Invoke-EceAction], Exception
        + FullyQualifiedErrorId : Unspecified error,CloudEngine.Cmdlets.InvokeCmdlet
    
    VERBOSE: 1> 2> Action: Status of 'Deployment-Phase4-ConfigureWAS' is 'Error'. - 10/16/2016 5:38:22 PM
    COMPLETE: Task Cloud - Deployment-Phase4-ConfigureWAS
    VERBOSE: 1> 2> Task: Status of action 'Deployment-Phase4-ConfigureWAS' of role 'Cloud' is 'Error'. - 10/16/2016 5:38:22 PM
    VERBOSE: 1> Step: Status of step 'Phase 4 - ConfigureVMs-Part2' is 'Error'. - 10/16/2016 5:38:22 PM
    Invoke-EceAction : 1> Action: Invocation of step 60.120 failed. Stopping invocation of action plan. - 10/16/2016 5:38:22 PM
    At line:1 char:1
    + Invoke-EceAction -RolePath Cloud -ActionType Deployment -Start 60.120 ...
    + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : InvalidOperation: (:) [Invoke-EceAction], Exception
        + FullyQualifiedErrorId : Unspecified error,CloudEngine.Cmdlets.InvokeCmdlet
    
    VERBOSE: 1> Action: Status of 'Deployment-Phase2-ConfigureStack' is 'Error'. - 10/16/2016 5:38:22 PM
    COMPLETE: Task Cloud - Deployment-Phase2-ConfigureStack
    VERBOSE: 1> Task: Status of action 'Deployment-Phase2-ConfigureStack' of role 'Cloud' is 'Error'. - 10/16/2016 5:38:22 PM
    VERBOSE: Step: Status of step 'Phase 2 - ConfigureVMs' is 'Error'. - 10/16/2016 5:38:22 PM
    Invoke-EceAction : Action: Invocation of step 60 failed. Stopping invocation of action plan. - 10/16/2016 5:38:22 PM
    At line:1 char:1
    + Invoke-EceAction -RolePath Cloud -ActionType Deployment -Start 60.120 ...
    + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : InvalidOperation: (:) [Invoke-EceAction], Exception
        + FullyQualifiedErrorId : Unspecified error,CloudEngine.Cmdlets.InvokeCmdlet
    
    PS C:\CloudDeployment\Configuration>




    summary log say below
    ----summary.xxxx-xx-xx.xx-xx-xx.x.log---------------

    -<Step EndTimeUtc="2016-10-17T00:38:22.9262599Z" Status="Error" StartTimeUtc="2016-10-17T00:37:42.7546428Z" Description="Configures Azure Stack with Azure AD." Name="(Katal) Azure Stack AAD Configuration." Index="124">
    -<Task EndTimeUtc="2016-10-17T00:38:22.9251517Z" Status="Error" StartTimeUtc="2016-10-17T00:37:42.7546428Z" RolePath="Cloud\Fabric\AAD" InterfaceType="Configure">
    -<Exception>
    <Message>Function 'ConfigureAAD' in module 'Roles\AAD\AAD.psd1' raised an exception: user_realm_discovery_failed: User realm discovery failed at <ScriptBlock>, <No file>: line 280</Message>
    <StackTrace> at CloudEngine.Actions.PowerShellHost.Invoke(InterfaceParameters parameters, Object legacyConfigurationObject, CancellationToken token) at CloudEngine.Actions.InterfaceTask.Invoke(Configuration roleConfiguration, Object legacyConfigurationObject, MultiLevelIndexRange indexRange, CancellationToken token)</StackTrace>
    <Raw>CloudEngine.Actions.InterfaceInvocationFailedException: Function 'ConfigureAAD' in module 'Roles\AAD\AAD.psd1' raised an exception: user_realm_discovery_failed: User realm discovery failed at <ScriptBlock>, <No file>: line 280 at CloudEngine.Actions.PowerShellHost.Invoke(InterfaceParameters parameters, Object legacyConfigurationObject, CancellationToken token) at CloudEngine.Actions.InterfaceTask.Invoke(Configuration roleConfiguration, Object legacyConfigurationObject, MultiLevelIndexRange indexRange, CancellationToken token)</Raw>
    </Exception>
    </Task>
    </Step>



    • Edited by Aaron.ZL Monday, October 17, 2016 8:32 AM
    Monday, October 17, 2016 2:31 AM
  • Hello,

    On MAS-WAS01 VM, can you check if this command is working?

    tnc api.azurestack.local -Port 443

    I had a similar issue too.

    Florent

    Thursday, October 20, 2016 10:24 AM
  • It worked. The result is below.




    But I haven't that remote address[192.168.102.4], do you know the correct remote ip address?

    -Aaron

    • Edited by Aaron.ZL Friday, October 21, 2016 1:57 AM
    Friday, October 21, 2016 1:37 AM
  • Hello,

    It's that one. It's a VIP IP Address.

    Ok, the problem is not here. On the SLB VM, for me, the SLBMux service was stopped. Checked that it's not the case for you.

    Florent

    Friday, October 21, 2016 5:34 AM
  • This issue has been solved.
    In my case, I had never set value of EnvironmentDNS parameter.
    Installation was completed when I added the EnvironmentDNS.
    Command is like below...
    Hope it can help someone.

    ------------------------------------------------------------------
    $adminpass = ConvertTo-SecureString "xxxxxx" -AsPlainText -Force
    $aadpass = ConvertTo-SecureString "aaaaaa" -AsPlainText -Force
    $aadcred = New-Object System.Management.Automation.PSCredential ("zzzzzzz@xxxxxxx.onmicrosoft.com", $aadpass)
    
    .\InstallAzureStackPOC.ps1 -AdminPassword $adminpass -AADAdminCredential $aadcred -NatIPv4Subnet xxx.xxx.xxx.xxx/xx -NatIPv4Address xxx.xxx.xxx.xxx -NatIPv4DefaultGateway xxx.xxx.xxx.xxx -EnvironmentDNS xxx.xxx.xxx.xxx

    • Marked as answer by Aaron.ZL Wednesday, October 26, 2016 7:26 AM
    Wednesday, October 26, 2016 7:26 AM