Question

尊敬的Microsoft专家

我在为Azure AD SSO配置转换Kerberos解密密钥时遇到麻烦。

当我在AADC服务器上使用Power Shell处理以下步骤时：

cd "C:\Program Files\Microsoft Azure Active Directory Connect"

Import-Module .\AzureADSSO.psd1

New-AzureADSSOAuthenticationContext

Get-AzureADSSOStatus

$creds = Get-Credential

Update-AzureADSSOForest -OnPremCredentials $creds

如这篇kbase文章中所述：

https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnect-sso-faq#how-can-i-roll-over-the-kerberos-decryption-key-of-the-azureadssoacc-computer-account

我收到以下错误消息：

[13:17:37.747] [ 10] [ERROR] Uploading computer account information failed. Error message: Internal error: An error occurred 
during the 'DesktopSsoNumOfDomains' process. Contact support (Failed Request Id = '692dae89-91fc-4fc4-855d-3e77b3c0702c')
Update-AzureADSSOForest : Uploading computer account information failed. Error message: Internal error: An error occurred 
during the 'DesktopSsoNumOfDomains' process. Contact support (Failed Request Id = '692dae89-91fc-4fc4-855d-3e77b3c0702c')
At C:\Users\********\Desktop\Kerberos_Ticket_Rollover.ps1:11 char:1
+ Update-AzureADSSOForest -OnPremCredentials $creds
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [Update-AzureADSSOForest], Exception
    + FullyQualifiedErrorId : System.Exception,Microsoft.KerberosAuth.Powershell.PowershellCommands.UpdateAzureADSSOForestC 
   ommand

有人知道如何解决此问题吗？这不是供股问题。

最诚挚的问候

FlaEdLi

Kerberos解密密钥翻转导致错误

0 个答案: