Compartilhamento de arquivos com Microsoft Entra kerberos

Question

Estou tentando configurar a autenticação do compartilhamento de arquivos através do Entra Kerberos, mas não estou tendo sucesso. Ao executar o "Debug-AzStorageAccountAuth" é apresentado erro apenas o "CheckEntraObject" com a informação "Failed Service Principal is missing SPN".

Na documentação é solicitado desativar e ativar novamente o Entra Kerberos mas não funcionou, tentei criar uma outra conta de armazenamento, mas o erro permaneceu.

Answer 1

Hello Emanuel Lopes

For further troubleshooting please share the required details.

1. Did you add private link FQDN to the storage account's Microsoft Entra application
   Here are a few things you can check and try:
2. Have you tried this setup using the document below? If not, please do so and share your results.
   Docs: https://learn.microsoft.com/en-us/azure/storage/files/storage-files-identity-auth-hybrid-identities-enable?tabs=azure-portal%2Cintune#grant-admin-consent-to-the-new-service-principal
3. Additionally, when you use the net use command prompt to mount, what error message do you receive?

Please see the document below for instructions on how to complete this setup.

The solution is to add the privateLink FQDN to the storage account's Microsoft Entra application before you mount the file share. You can add the required identifierUris to the application object using the Azure portal by following these steps.

 Refer docs: https://learn.microsoft.com/en-us/troubleshoot/azure/azure-storage/files/security/files-troubleshoot-smb-authentication?toc=%2Fazure%2Fstorage%2Ffiles%2Ftoc.json&tabs=azure-portal#solution-7

---

I hope this has been helpful!

If above is unclear and/or you are unsure about something add a comment below.