HDInsight群集ADDS域加入失败(企业安全性) [英] HDInsight cluster ADDS domain join fails (Enterprise Security)
问题描述
我已经尝试了很多次，但仍然无法让HDInsight群集加入ADDS域.
I have tried a number of times and still cannot get an HDInsight cluster to join an ADDS domain.
我得到的错误是:
" 资源操作以终端供应状态"Failed"完成. ":[{{\" code \":\"FailedToJoinToDomain \"，\消息\":\失败 加入域XXXXXXX.com.输出=无法加入域:无法连接到AD:无法为请求的领域联系任何KDC \\ n，错误= kerberos_kinit_password XXXXXX@XXXXXXX.ONMICROSOFT.COM失败:无法为请求的领域联系任何KDC \\ n \} ]}}""
"The resource operation completed with terminal provisioning state 'Failed'.\",\"details\":[{\"code\":\"FailedToJoinToDomain\",\"message\":\"Failed to join to domain XXXXXXX.com. Output = Failed to join domain: failed to connect to AD: Cannot contact any KDC for requested realm\\n, Error = kerberos_kinit_password XXXXXX@XXXXXXX.ONMICROSOFT.COM failed: Cannot contact any KDC for requested realm\\n\"}]}}"
有人知道什么地方可能出问题吗?
Does anyone have any idea what might be wrong?
提前谢谢！
推荐答案
在创建HDInsight群集之前，请确保已创建Azure ADDS.
已提供域服务，您需要在Azure AD DC Administrators组中创建一个服务帐户才能创建 HDInsight群集.该服务帐户必须是Azure AD上的全局管理员.
After the domain service has been provisioned, you need to create a service account in the Azure AD DC Administrators group to create the HDInsight cluster. The service account must be a global administrator on the Azure AD.
我建议您，请按照说明文件进行操作 使用Azure Active Directory域服务配置加入域的HDInsight群集 (如果您之前没有进行过检查的话).
I suggest you, follow the documentation to Configure Domain-joined HDInsight clusters using Azure Active Directory Domain Services in case if you haven’t checked earlier.
您可以想参考 在HDInsight中计划加入Azure域的Hadoop群集 和 Azure HDInsight的企业安全软件包预览 以获取更多详细信息.
You may want to refer Plan Azure domain-joined Hadoop clusters in HDInsight and Enterprise Security Package preview for Azure HDInsight for further details.
- -------------------------------------------------- -------------------------------------------
请点击标记为答案"和可以为您提供帮助的帖子上的投票为有帮助"，这可能会对其他社区成员有所帮助
-----------------------------------------------------------------------------------------------
Do click on "Mark as Answer" and "Vote as Helpful" on the post that helps you, this can be beneficial to other community members
这篇关于HDInsight群集ADDS域加入失败(企业安全性)的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
