首页 > 解决方案 > 错误:代码="VMExtensionProvisioningError" JsonADDomainExtension

问题描述

我有 terraform 脚本,它使用以下代码加入域:

resource "azurerm_virtual_machine_extension" "join-domain" {
  name                 = azurerm_virtual_machine.client.name
  virtual_machine_id   = azurerm_virtual_machine.client.id
 // resource_group_name  = var.resource_group_name
  //virtual_machine_name = azurerm_virtual_machine.client.name
  publisher            = "Microsoft.Compute"
  type                 = "JsonADDomainExtension"
  type_handler_version = "1.3"

  # NOTE: the `OUPath` field is intentionally blank, to put it in the Computers OU
  settings = <<SETTINGS
    {
        "Name": "${var.active_directory_domain}",
        "OUPath": "",
        "User": "${var.active_directory_domain}\\${var.active_directory_username}",
        "Restart": "true",
        "Options": "3"
    }
SETTINGS

  protected_settings = <<SETTINGS
    {
        "Password": "${var.active_directory_password}"
    }
SETTINGS

  depends_on = ["null_resource.wait-for-domain-to-provision"]
}

代码运行后,在 Terraform 中出现以下错误:

 Error: Code="VMExtensionProvisioningError" Message="VM has reported a failure when processing extension 'pocvde-client'. Error message: \"Exception(s) occured while joining Domain 'pocvde.local'\"\r\n\r\nMore information on troubleshooting is available at https://aka.ms/vmextensionwindowstroubleshoot "
   on modules/windows-client/4-join-domain.tf line 1, in resource "azurerm_virtual_machine_extension" "join-domain":
    1: resource "azurerm_virtual_machine_extension" "join-domain" {

我检查了 C:\WindowsAzure\Logs\Plugins\Microsoft.Compute.JsonADDomainExtension 中的 windows 客户端日志,我得到了以下跟踪:

2020-06-23T06:30:54.1176834Z    [Info]: Get Domain/Workgroup Information
2020-06-23T06:30:54.1645880Z    [Info]: Current domain:  (), current workgroup: WORKGROUP, IsDomainJoin: True, Target Domain/Workgroup: pocvde.local.
2020-06-23T06:30:54.1802137Z    [Info]: Domain Join Path.
2020-06-23T06:30:54.1802137Z    [Info]: Current Domain name is empty/null. Try to get Local domain name.
2020-06-23T06:30:54.1958114Z    [Info]: In AD Domain extension process, the local domain is: ''.
2020-06-23T06:30:54.1958114Z    [Info]: Domain Join will be performed.
2020-06-23T06:30:54.3460994Z    [Error]:    Try join: domain='pocvde.local', ou='', user='pocvde.local\AdminAls', option='NetSetupJoinDomain, NetSetupAcctCreate' (#3:User Specified), errCode='1355'.
2020-06-23T06:30:54.3621879Z    [Error]:    Setting error code to 53 while joining domain
2020-06-23T06:30:54.4085771Z    [Error]:    Try join: domain='pocvde.local', ou='', user='pocvde.local\AdminAls', option='NetSetupJoinDomain' (#1:User Specified without NetSetupAcctCreate), errCode='1355'.
2020-06-23T06:30:54.4085771Z    [Error]:    Setting error code to 53 while joining domain
2020-06-23T06:30:54.4241709Z    [Error]:    Computer failed to join domain 'pocvde.local' from workgroup 'WORKGROUP'.

我已将客户端 vm 操作系统从 DataCenter-16 更改为 Windows 10,但仍然出现同样的错误。将域加入操作之前的等待时间从 12 分钟增加到 24 分钟,没有任何变化。你有什么主意吗?

标签: windowsazureactive-directoryterraformterraform-provider-azure

解决方案


我看到域控制器设置不正确,在解决域加入操作正确完成后解决了我的问题


推荐阅读