Farmbeats active directory application problem.

Question

Farmbeats active directory application problem.

david hwang 1

I am receiving this error when installing Farmbeats as an AAD application-

ERROR: Failed to connect to MSI. Please make sure MSI is configured correctly.
Get Token request returned: <Response [400]>
Invoke-RestMethod: /home/david/create_aad_script.ps1:209
Line |
209 | Invoke-RestMethod -Uri $MsGraphRequrl -Method PATCH -Body $PreAuthBo …
| ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
| {"error":{"code":"InvalidAuthenticationToken","message":"CompactToken parsing failed
| with error code:
| 80049217","innerError":{"date":"2021-09-11T13:55:52","request-id":"02f26127-8106-4b49-8dec-1908050fefde","client-request-id":"02f26127-8106-4b49-8dec-1908050fefde"}}}

I have followed the procedure detailed here-
https://learn.microsoft.com/en-us/azure/industry/agriculture/install-azure-farmbeats#code-try-0

I am installing into the US east region, am the owner of the subscription and the resource group, and am the owner of the tenant.

Any help would be much appreciated!

QuantumCache 20,681 Reputation points Moderator

2021-09-12T01:59:48.82+00:00

Hello @david hwang was this error transient or still persists?
david hwang 1 Reputation point

2021-09-20T21:22:15.417+00:00

still there

1 answer

Your answer

QuantumCache 20,681 Reputation points Moderator

2021-09-12T01:59:48.82+00:00

Hello @david hwang was this error transient or still persists?
david hwang 1 Reputation point

2021-09-20T21:22:15.417+00:00

still there

Answer 1

QuantumCache 20,681 Moderator

Hello @david hwang Please try again and let us know if you face any issues.

Your subscription ownership looks good, but it might be an issue with the email or maybe you want to revisit the steps?

I tried the Create AAD application Pre-Req step: Create an AAD application
Below steps I tried from my subscription's Powershell cloud shell.

wget -q https://aka.ms/FarmBeatsAADScript -O ./create_aad_script.ps1  
cd  
./create_aad_script.ps1

Please comment in the below section, happy to help further!

david hwang 1 Reputation point

2021-09-12T15:27:30.707+00:00

Same error-
ERROR: Failed to connect to MSI. Please make sure MSI is configured correctly.
Get Token request returned: <Response [400]>
Invoke-RestMethod: /home/david/create_aad_script.ps1:209
Line |
209 | Invoke-RestMethod -Uri $MsGraphRequrl -Method PATCH -Body $PreAuthBo …
| ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
| {"error":{"code":"InvalidAuthenticationToken","message":"CompactToken parsing failed
| with error code:
| 80049217","innerError":{"date":"2021-09-12T15:12:14","request-id":"f31c7013-7e0f-4cd1-ba4b-fcb4e3baa1a3","client-request-id":"f31c7013-7e0f-4cd1-ba4b-fcb4e3baa1a3"}}}

Here are the exact steps I took-
Deleted all Resource Groups in my account.
Deleted all users except- ******@twentyfortynine.onmicrosoft.com (Owner)
Went to the Create Azure Farmbeats page-
Chose the only available Subscription (I only have one)
Created a new service group named "fertileground"
Chose the EAST US region
Entered the email address- dhwang.twentyfortynine.onmicrosoft.com
Went to the Dependencies page and cwas redirected to- https://learn.microsoft.com/en-us/azure/industry/agriculture/install-azure-farmbeats
Clicked the TRY IT tag and chose to set up a storage account (default parameters).
Ran the following-
wget -q https://aka.ms/FarmBeatsAADScript -O ./create_aad_script.ps1
cd
./create_aad_script.ps1

Abend with the error above.
QuantumCache 20,681 Reputation points Moderator

2021-09-13T04:56:17.01+00:00

Instead of onmicrosoft.com email id , could you please try with your original user ID like your Gmail id or Outlook email id or your corporate email id with which you have created your Azure Subscription Account?
david hwang 1 Reputation point

2021-09-13T10:38:19.927+00:00

Satish-
Here is an experiment I tried-
Set up a brand new Azure account (dhwang.azure@Stuff .com).
Logged into Azure.
Went to the Marketplace and installed Farmbeats following the exact instructions from here-
https://learn.microsoft.com/en-us/azure/industry/agriculture/install-azure-farmbeats#create-an-aad-application

After running these commands in the Cloud Shell instance (storage account was set up using default options)-
wget -q https://aka.ms/FarmBeatsAADScript -O ./create_aad_script.ps1
cd
./create_aad_script.ps1

and entering the following info-
FarmBeats Website Name: hwangtest
Azure login ID: ******@gmaail.com
Subscription ID: SUBSCRIPTION ID COPIED FROM SUBCRIPTION INFO PAGE

I get the same error:
ERROR: Failed to connect to MSI. Please make sure MSI is configured correctly.
Get Token request returned: <Response [400]>
Invoke-RestMethod: /home/david/create_aad_script.ps1:209
Line |
209 | Invoke-RestMethod -Uri $MsGraphRequrl -Method PATCH -Body $PreAuthBo …
| ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
QuantumCache 20,681 Reputation points Moderator

2021-09-13T19:53:27.223+00:00

Just to confirm, are you using Powershell or Bash command?

Could you please verify the below information from your account, below is my account permissions.
david hwang 1 Reputation point

2021-09-18T01:26:54.347+00:00

doesnot work (same error) with non onmicrosot.com email address
david hwang 1 Reputation point

2021-09-20T12:37:07.583+00:00

I am using the web based powershell (accessed by clicking "try it".
david hwang 1 Reputation point

2021-09-20T12:39:26.003+00:00

Out of desperation I gave the user all roles (which includes both the roles of global administrator and application developer)
Lucky Ncube 0 Reputation points

2024-08-22T11:04:02.0766667+00:00

I am trying to down load the script and i am getting no file it creates but it has nothing in it