从AAD获取AppPrincipalId的OAuth令牌时出错

时间:2017-04-26 11:13:27

标签: azure oauth-2.0 hdinsight azure-data-lake service-principal

我正在使用服务主体通过模板部署(shell脚本)使用Data Lake Store创建HDInsight。

在运行部署脚本时,我在Spark HDInsight群集的初始群集创建后出现以下错误。

错误是:

At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/arm-debug for usage details. {
  "status": "Failed",
  "error": {
    "code": "ResourceDeploymentFailure",
    "message": "The resource operation completed with terminal provisioning state 'Failed'.",
    "details": [
      {
        "code": "InvalidDocumentErrorCode",
        "message": "DeploymentDocument 'AmbariConfiguration_x_x' failed the validation. Error: 'Error while getting access to the datalake storage account hdiclusterdls: Error while getting the OAuth token from AAD for AppPrincipalId xxxxxx-xxxxxx-xxxxxx-xxxxxx-xxxxxx, ResourceUri https://management.core.windows.net/, AADTenantId https://login.windows.net/xxxxxx-xxxxxx-xxxxxx-xxxxxx-xxxxxx, ClientCertificateThumbprint xxxxxx-xxxxxx-xxxxxx-xxxxxx-xxxxxx.'"
      }
    ]
  }
}  Correlation ID: xxxxxx-xxxxxx-xxxxxx-xxxxxx-xxxxxx

我的猜测是使用服务主体身份验证在HDInsight和Data Lake商店集成之间存在一些问题。

非常感谢任何帮助。

0 个答案:

没有答案