
when try to prepare our sandbox environment using this document:
I can not complete step no 26, as when trying to do it it gives me an error:
Step26 : Configure ADFS
Open the ADFS Server and add the ADFS feature addition from Server Manager Roles and Features
Configure the AD FS identifier so that it matches the AD FS token issuer.
Execute the Below code in Adfs machine in Powershell
$adfsProperties = Get-AdfsProperties
Set-AdfsProperties -Identifier $adfsProperties.IdTokenIssuer
Set-AdfsGlobalAuthenticationPolicy -PrimaryIntranetAuthenticationProvider FormsAuthentication, MicrosoftPassportAuthentication
For sign-in, the user's email address must be an acceptable authentication input.
Add-Type -AssemblyName System.Net
$fqdn = ([System.Net.Dns]::GetHostEntry('localhost').HostName).ToLower()
$domainName = $fqdn.Substring($fqdn.IndexOf('.')+1)
Set-AdfsClaimsProviderTrust -TargetIdentifier 'AD AUTHORITY' -AlternateLoginID mail -LookupForests $domainName
Once after the ADFS necessary scripts are executed, Application group script should be executed
.\Publish-ADFSApplicationGroup.ps1 -HostUrl https://ax.Local.com
Now after successfully deployed the ADFS, access the url in AOStype node
https://adfs.local.com/adfs/.well-known/openid-configuration
This step is highly important to complete is successfully since the Dynamics on premise user access page opens based on the ADFS redirection Configuration
you successfully access the URL, a JavaScript Object Notation (JSON) file is returned that contains your AD FS configuration, and you will see that your AD FS URL is trusted.
Erorr
PS C:\Windows\system32> $adfsProperties = Get-AdfsProperties \\ note the variable already has info.
PS C:\Windows\system32> Set-AdfsProperties -Identifier $adfsProperties.IdTokenIssuer
Set-AdfsProperties : Cannot validate argument on parameter 'Identifier'. The argument is null. Provide a valid value for the argument, and then try
running the command again.
At line:1 char:32
+ Set-AdfsProperties -Identifier $adfsProperties.IdTokenIssuer
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidData: (:) [Set-AdfsProperties], ParameterBindingValidationException
+ FullyQualifiedErrorId : ParameterArgumentValidationError,Microsoft.IdentityServer.Management.Commands.SetServicePropertiesCommand
PS C:\Windows\system32> Set-AdfsProperties -Identifier $adfsProperties.Identifier
PS C:\Windows\system32> $adfsProperties = Get-AdfsProperties
PS C:\Windows\system32> Set-AdfsProperties -Identifier $adfsProperties.IdTokenIssuer
Set-AdfsProperties : Cannot validate argument on parameter 'Identifier'. The argument is null. Provide a valid value for the argument, and then try
running the command again.
At line:1 char:32
+ Set-AdfsProperties -Identifier $adfsProperties.IdTokenIssuer
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidData: (:) [Set-AdfsProperties], ParameterBindingValidationException
+ FullyQualifiedErrorId
but when it continues doing step no 27
Step 27: Configure a connector and install an on-premises local agent
Sign in to LCS, and open the on-premises implementation project.
PS C:\InfrastructureScripts-333627\LocalAgent-394311> .\LocalAgentCLI.exe Install C:\InfrastructureScripts-333627\LocalAgent-394311\localagent-config.json
LocalAgentCLI.exe Error: 0 : Exception System.Fabric.FabricException: An error occurred during this operation. Please check the trace logs for more details. ---> System.Runtime.InteropServices.COMException: The credentials supplied to the package were not recognized (Exception from HRESULT: 0x8009030D)
at System.Fabric.Interop.NativeClient.IFabricClientSettings2.SetSecurityCredentials(IntPtr credentials)
at System.Fabric.FabricClient.SetSecurityCredentialsInternal(SecurityCredentials credentials)
at System.Fabric.Interop.Utility.<>c__DisplayClass28_0.<WrapNativeSyncInvoke>b__0()
at System.Fabric.Interop.Utility.WrapNativeSyncInvoke[TResult](Func`1 func, String functionTag, String functionArgs)
--- End of inner exception stack trace ---
at System.Fabric.Interop.Utility.WrapNativeSyncInvoke[TResult](Func`1 func, String functionTag, String functionArgs)
at System.Fabric.Interop.Utility.RunInMTA(Action action)
at System.Fabric.FabricClient.InitializeFabricClient(SecurityCredentials credentialArg, FabricClientSettings newSettings, String[] hostEndpointsArg)
at SetupInfrastructure.ServiceFabricHelper.GetServiceFabricClient(ServiceFabricSettings sfSettings)
at SetupInfrastructure.ServiceFabricApplicationSetupManager`1..ctor(T settings, String setupFolder)
but if I added the db_awner user name and password it gives me the following error:
PS C:\InfrastructureScripts-333627\LocalAgent-394311> .\LocalAgentCLI.exe Install localagent-config.json
Invoking Migrate.exe OrchestrationService.DataModels.dll /connectionString:"Data Source=sb-erp-sql-01.manpower.gov.om;Initial Catalog = OrchestratorData; Integrated Security = False; MultipleActiveResultSets=True;User ID=axdbadmin;Password=D365dbp@ssw0rd" /connectionProviderName:System.Data.SqlClient /startUpDirectory:C:\InfrastructureScripts-333627\LocalAgent-394311
LocalAgentCLI.exe Error: 0 : Exception System.AggregateException: One or more errors occurred. ---> System.Fabric.FabricTransientException: Could not ping any of the provided Service Fabric gateway endpoints. ---> System.Runtime.InteropServices.COMException: Exception from HRESULT: 0x80071C49
at System.Fabric.Interop.NativeClient.IFabricClusterManagementClient11.EndGetClusterManifest2(IFabricAsyncOperationContext context)
at System.Fabric.FabricClient.ClusterManagementClient.GetClusterManifestAsyncEndWrapper(IFabricAsyncOperationContext context)
at System.Fabric.Interop.AsyncCallOutAdapter2`1.Finish(IFabricAsyncOperationContext context, Boolean expectedCompletedSynchronously)
--- End of inner exception stack trace ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at SetupInfrastructure.ServiceFabricApplicationSetupManager`1.<GetImageStoreParameters>d__25.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at SetupInfrastructure.ServiceFabricApplicationSetupManager`1.<Deploy>d__24.MoveNext()
--- End of inner exception stack trace ---
at System.Threading.Tasks.Task.ThrowIfExceptional(Boolean includeTaskCanceledExceptions)
at System.Threading.Tasks.Task.Wait(Int32 millisecondsTimeout, CancellationToken cancellationToken)
at LocalAgentCLI.Program.Main(String[] args)
---> (Inner Exception #0) System.Fabric.FabricTransientException: Could not ping any of the provided Service Fabric gateway endpoints. ---> System.Runtime.InteropServices.COMException: Exception from HRESULT: 0x80071C49
at System.Fabric.Interop.NativeClient.IFabricClusterManagementClient11.EndGetClusterManifest2(IFabricAsyncOperationContext context)
at System.Fabric.FabricClient.ClusterManagementClient.GetClusterManifestAsyncEndWrapper(IFabricAsyncOperationContext context)
at System.Fabric.Interop.AsyncCallOutAdapter2`1.Finish(IFabricAsyncOperationContext context, Boolean expectedCompletedSynchronously)
--- End of inner exception stack trace ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at SetupInfrastructure.ServiceFabricApplicationSetupManager`1.<GetImageStoreParameters>d__25.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at SetupInfrastructure.ServiceFabricApplicationSetupManager`1.<Deploy>d__24.MoveNext()<---
Press any key to exit
PLEASE Need help in that.
this is my cluster status:
Hi Mohamed,
For the ADFS issue, you may ask in ADFS forum.
For the local agent issue, Please be aware that after you downloading the local agent zip file, you should unlock first. If that still doesn’t work, please raise a support ticket to us for further investigation.
What’s more, please make sure Test-D365FOconfiguration.ps1 is executed in each server.