Issue with WinRM and Azure AD Sync

Question

Hello,

I'm currently working on a monitoring solution for a customer and they have their local AD synchronize on Azure AD with AD Connect.

They need to monitor the state of their synchronization and I found that some useful commands to do that like "Get-ADSyncRunProfileResult".

The issue is that I need to execute this command from an Ubuntu server using WinRM and Kerberos and when I try the command, I have the following error message :

Get-ADSyncRunProfileResult : Il n'existait pas de point de terminaison à l'écoute sur
net.pipe://localhost/ADSyncManagement pouvant accepter le message. Ceci est souvent dû à une adresse ou une action
SOAP incorrecte. S'il est présent, voir l'élément InnerException pour plus d'informations.
Au caractère D:\ADsync_snav\syncAD\syncAD.ps1:1 : 60

• ... sync_snav\syncAD\Sync.txt" -Value (Get-ADSyncRunProfileResult| Select ...
• ~~~~~~~~~~~~~~~~~~~~~~~~~~
• CategoryInfo : ReadError: (Microsoft.Ident...ileResultCmdlet:GetADSyncRunProfileResultCmdlet) [Get-ADSy
  ncRunProfileResult], EndpointNotFoundException
• FullyQualifiedErrorId : Microsoft.IdentityManagement.PowerShell.Cmdlet.GetADSyncRunProfileResultCmdlet

Sorry part of the message is in French but it basically say that "There is no endpoint listening on net.pipe://localhost/ADSyncManagement which is able to accept the message".

But when I execute Get-Command, I can all the ADSyncCommand, and when I execute "Get-ADSyncScheduler" I can see the configuration.

I found some informations on internet but nothing really help.

Can you help me please ?

PS : Here is the command i'm using.

/usr/local/nagios/libexec/winrm_command.py -H 'XXXX' -l 'XXXX' -x 'XXXX' -c 'Get-ADSyncRunProfileResult'

Thank you in advance.

Answer 1

Are you using Powershell on a support version of Ubuntu?

https://learn.microsoft.com/en-us/powershell/scripting/install/install-ubuntu?view=powershell-7.2

Answer 2

Hello,

Yes, the server is an Ubuntu 20 server, I think the main issue is that I have to use Powershell in admin mode and with the UAC, it's impossible to confirm from an Ubuntu server or maybe you have a solution for this without disabling the UAC ?

Thanks in advance.

Answer 3

When you are running Powershell on the Ubuntu server, are using running it using "sudo"?

https://stackoverflow.com/questions/66213658/how-to-sudo-with-powershell-elevate-powershell-running-a-command-as-admin-o

Answer 4

Is the Net.Pipe Listener Adapter service running on the remote server? Are you able to run this command from a Windows server without issue?