主页 / server / 问题 / 1064253
Accepted
jrd1989
Asked: 2021-05-21 11:17:34 +0800 CST

Azure Runbook 无法连接 - “跨云请求中不支持机密客户端。”

  • 772

我在Azure Gov 租户中工作。我创建了一个 Azure 自动化帐户，这样我就可以在周末使用powershell runbook来缩减 Web 应用程序。我正在使用下面的代码来验证以帐户身份运行，但它失败并显示以下错误消息：“Cross Cloud 请求中不支持机密客户端。”

$ConnectionName = "AzureRunAsConnection"

try
{
    
    # Get the connection "AzureRunAsConnection "
    $ServicePrincipalConnection = Get-AutomationConnection -Name $ConnectionName         

    # Logging into Azure
    Add-AzureRmAccount `
                -ServicePrincipal `
                -TenantId $ServicePrincipalConnection.TenantId `
                -ApplicationId $ServicePrincipalConnection.ApplicationId `
                -CertificateThumbprint $ServicePrincipalConnection.CertificateThumbprint
                -EnvironmentName "AzureUSGovernment"
              

    Write-Output "Successfully logged in to Azure." 
} 
catch
{
    if (!$ServicePrincipalConnection)
    {
        $ErrorMessage = "Connection $ConnectionName not found."
        throw $ErrorMessage
    } 
    else
    {
        Write-Error -Message $_.Exception
        throw $_.Exception
    }

}

我尝试对较新的 powershell 模块使用不同的身份验证命令，但出现相同的错误：

$connectionName = "AzureRunAsConnection"
$servicePrincipalConnection = Get-AutomationConnection -Name $connectionName

$logonAttempt = 0
$logonResult = $False

while(!($connectionResult) -And ($logonAttempt -le 10))
{
    $LogonAttempt++
    #Logging in to Azure...
    $connectionResult = Connect-AzAccount `
                           -ServicePrincipal `
                           -Tenant $servicePrincipalConnection.TenantId `
                           -ApplicationId $servicePrincipalConnection.ApplicationId `
                           -CertificateThumbprint $servicePrincipalConnection.CertificateThumbprint

    Start-Sleep -Seconds 30
}

有没有人以前运行过这个问题并找到了解决方法？我迷路了，希望得到任何帮助/帮助。

powershell automation runas azure

1 个回答

  1. Best Answer

    这最终对我有用，最后添加-Environment参数解决了我的问题：

    $ConnectionName = "AzureRunAsConnection"

try 
{
# Get the connection "AzureRunAsConnection "
$Conn = Get-AutomationConnection -Name $ConnectionName

# Logging into Azure
Connect-AzAccount -ServicePrincipal -Tenant $Conn.TenantID -ApplicationId $Conn.ApplicationID -CertificateThumbprint $Conn.CertificateThumbprint -Environment AzureUSGovernment

Write-Output "Successfully logged in to Azure.
    • 1

相关问题