Errors with cloud Kerberos trust authentication setup

Dave Williamson 20 Reputation points
2024-11-07T08:48:27.3866667+00:00

I am trying to setup Kerberos trust authentication within a Hybrid environment. I take the following steps.

Enabled TLS 1.2 > Installed AzureADHybridAuthenticationManagement PS Script All on machine running latest version of ADConnect.

ran following PS commands

$domain = $env:mydomain.local with my dns domain name

$cloudcred = get-credential box pops up and i enter username@contoso.onmicrosoft.com +pwd

$domaincred = get-credential box pops up enter username mydomain\username ( i dont think this is needed if i am running from machine where ADConnect is installed, but entered anyway)

Set-AzureADKerberosServer -Domain $domain -cloudcredential $cloudcred -domaincredential $domaincred

I get error - Set-AzureADKerberosServer : Cannot bind argument to parameter 'Domain' because it is null.

At line:1 char:35

  • Set-AzureADKerberosServer -Domain $domain -cloudcredential $cloudcred ...
  •                               ~~~~~~~
    
    • CategoryInfo : InvalidData: (:) [Set-AzureADKerberosServer], ParameterBindingValidationException
    • FullyQualifiedErrorId : ParameterArgumentValidationErrorNullNotAllowed,Microsoft.AzureAD.Kdc.Management.SetAzureADKerberosServer

Any help would be greatly appreciated. Not sure if this is related to MFA being enabled on my account. I dont get MFA prompt to enter code.

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,423 questions
{count} votes

Accepted answer
  1. Goutam Pratti 900 Reputation points Microsoft Vendor
    2024-11-12T04:14:30.0866667+00:00

    Hello @Dave Williamson ,

    Thank you for responding.

    I'm glad that you were able to resolve your issue and thank you for posting your solution so that others experiencing the same thing can easily reference this! Since the Microsoft Q&A community has a policy that "The question author cannot accept their own answer. They can only accept answers by others ", I'll repost your solution in case you'd like to "Accept " the answer.

    Issue: Errors with cloud Kerberos trust authentication setup
    Error: Set-AzureADKerberosServer : Cannot bind argument to parameter 'Domain' because it is null.

    Solution:
    Resolved the issue & it was related to MFA. It seems it was important to do these steps in a different order to what was using, may have misread the Microsoft instructions.

    follow this video https://www.youtube.com/watch?v=FW3TF0zFWd0 and worked.

    If you have any other questions or are still running into more issues, please let me know. Thank you again for your time and patience throughout this issue.

    Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

    Regards,
    Goutam Pratti.

    0 comments No comments

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.