Can't bind to Azure LDAPS

April 30, 2020, 8:10 am

≫ Next: Using resourcegroup.name() in tag value when RG is created but does stays blank

≪ Previous: Azure Self Service Password Reset Pilot Questions

Hello, I'm trying to bind to Azure LDAPS with correct user creds.

I've generated a certificate on CertificateTools because Azure LDAP didn't want to accept a certificate that I tried to generate following by this article: https://docs.microsoft.com/en-in/azure/active-directory-domain-services/tutorial-configure-ldaps.

I configured my DNS's TXT and created an Azure domain. After that, my cert was accepted successfully.

I have one windows server 2016 and imported this certificate to it.

I can connect to Azure LDAPS via ldp.exe from WS2016, but can't make BIND working.

I've created the user in Azure AD, give membership in administrative groups, and applied for all roles in the domain.

When I trying to bind I get this:

0 = ldap_set_option(ld, LDAP_OPT_ENCRYPT, 0)
res = ldap_bind_s(ld, NULL, &NtAuthIdentity, NEGOTIATE (1158)); // v.3
	{NtAuthIdentity: User='azure'; Pwd=<unavailable>; domain = 'example.link'}
Error <49>: ldap_bind_s() failed: Invalid Credentials.
Server error: 8009030C: LdapErr: DSID-0C090588, comment: AcceptSecurityContext error, data 52e, v2580
Error 0x8009030C The logon attempt failed

I've tried everything:

1) to bind with credentials, typing domain example.link anduser azure@example.link

2) to bind with credentials, typing domain example.link anduser azure

3) to bind with credentials, typing domain empty and user azure@example.link

4) to simple bind, typing user azure@example.link

5) to simple bind, typing user azure

When I trying to bind with simple bind method I receive this error:

-----------
res = ldap_simple_bind_s(ld, 'azure@example.link', <unavailable>); // v.3
Error <52>: ldap_simple_bind_s() failed: Unavailable
Server error: 8009030C: LdapErr: DSID-0C090588, comment: AcceptSecurityContext error, data 52e, v2580
Error 0x8009030C The logon attempt failed

And I'm sure that's credentials is right. Also I'm using free trial subscription.

↧

Using resourcegroup.name() in tag value when RG is created but does stays blank

May 5, 2020, 9:58 am

≫ Next: How to change "Request to Reset Microsoft Online Services Password" contact email address

≪ Previous: Can't bind to Azure LDAPS

I am using the syntax in a tag value

"value": "[first(split(resourceGroup().name, '-'))]"

to capture a certain part of the resource group name in a tag value but when RG is created it is blank.

I can then run a remediation task and it populates properly.

Why does it not populate when RG is created?

↧

How to change "Request to Reset Microsoft Online Services Password" contact email address

May 26, 2020, 6:01 am

≫ Next: Experiencing authentication issues The portal is having issues getting an authentication token. The experience rendered may be degraded.

≪ Previous: Using resourcegroup.name() in tag value when RG is created but does stays blank

Hi guys,

Recently a regular user received an email from msonlineservicesteam@microsoftonline.com.

The following user in your organization has requested a password reset be performed for their account:

•actual@mailbox.adress
•First Name: actual name
•Last Name: actual lastname

Consider contacting this user to validate this request is authentic before continuing.

If you have determined that this is a valid request, use your service's admin portal (Office 365, Windows Intune, Windows Azure, etc.) to reset the password for this user.

Want to let you users reset their own passwords? Check out how you can enable password reset for users in your organization with just a few clicks.

Sincerely,
Actual Company Name

How I can change the contact email address for such requests.

↧

Experiencing authentication issues The portal is having issues getting an authentication token. The experience rendered may be degraded.

April 14, 2020, 12:15 pm

≫ Next: Enforcing phone number in azure active directory MFA

≪ Previous: How to change "Request to Reset Microsoft Online Services Password" contact email address

Hi,

Since past 4-5 days, every time I press the 'Create a resource' button I get the below error. I am trying to create a virtual machine. I have an existing machine and that works fine. Please help!

===============================================================================

Experiencing authentication issues

The portal is having issues getting an authentication token. The experience rendered may be degraded.

Additional information from the call to get a token:

Extension: Microsoft_Azure_Marketplace

Resource: createleadapi

Details: MSAL.Desktop.4.7.0.0.MsalServiceException:

ErrorCode: invalid_resource

Microsoft.Identity.Client.MsalServiceException: AADSTS500014: Resource 'a0e1e353-1a3e-42cf-a8ea-3a9746eec58c' is disabled.

Trace ID: 92bf2465-2554-4f56-a70a-2d755dad3500

Correlation ID: a33d9da1-4bad-49f3-85e5-2da6141c57a0

Timestamp: 2020-04-14 18:51:40Z

at Microsoft.Identity.Client.OAuth2.OAuth2Client.ThrowServerException(HttpResponse response, RequestContext requestContext)

at Microsoft.Identity.Client.OAuth2.OAuth2Client.CreateResponse[T](HttpResponse response, RequestContext requestContext, Boolean addCorrelationId)

at Microsoft.Identity.Client.OAuth2.OAuth2Client.<ExecuteRequestAsync>d__10`1.MoveNext()