Error from CloudShell - Failed to connect to MSI. Please make sure MSI is configured correctly. #17695

rajdhandus · 2021-04-14T20:20:26Z

This is autogenerated. Please review and update as needed.

Describe the bug

Command Name
az ad sp show

Errors:

Failed to connect to MSI. Please make sure MSI is configured correctly.
Get Token request returned: <Response [400]>

To Reproduce:

Steps to reproduce the behavior. Note that argument values have been redacted, as they may contain sensitive information.

Put any pre-requisite steps here...
az ad sp show --id {} -o {} --query {} --debug

Expected Behavior

Environment Summary

Linux-4.15.0-1112-azure-x86_64-with-debian-10.2 (Cloud Shell)
Python 3.6.10
Installer: DEB

azure-cli 2.22.0

Extensions:
aks-preview 0.4.73
ai-examples 0.2.5
ssh 0.1.4

Additional Context

rajkumar@Azure:~$ az ad sp show --id governor-umi-ppe-1 -o tsv --query objectId --debug
cli.knack.cli: Command arguments: ['ad', 'sp', 'show', '--id', 'governor-umi-ppe-1', '-o', 'tsv', '--query', 'objectId', '--debug']
cli.knack.cli: __init__ debug log:
Enable color in terminal.
cli.knack.cli: Event: Cli.PreExecute []
cli.knack.cli: Event: CommandParser.OnGlobalArgumentsCreate [<function CLILogging.on_global_arguments at 0x7fa89e637c80>, <function OutputProducer.on_global_arguments at 0x7fa89e5677b8>, <function CLIQuery.on_global_arguments at 0x7fa89e5838c8>]
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableCreate []
cli.azure.cli.core: Modules found from index for 'ad': ['azure.cli.command_modules.role']
cli.azure.cli.core: Loading command modules:
cli.azure.cli.core: Name                  Load Time    Groups  Commands
cli.azure.cli.core: role                      0.004        17        61
cli.azure.cli.core: Total (1)                 0.004        17        61
cli.azure.cli.core: These extensions are not installed and will be skipped: ['azext_next']
cli.azure.cli.core: Loading extensions:
cli.azure.cli.core: Name                  Load Time    Groups  Commands  Directory
cli.azure.cli.core: ai-examples               0.116         1         1  /opt/az/lib/python3.6/site-packages/azure-cli-extensions/ai-examples
cli.azure.cli.core: Total (1)                 0.116         1         1
cli.azure.cli.core: Loaded 18 groups, 62 commands.
cli.azure.cli.core: Found a match in the command table.
cli.azure.cli.core: Raw command  : ad sp show
cli.azure.cli.core: Command table: ad sp show
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableTruncate [<function AzCliLogging.init_command_file_logging at 0x7fa89e0be9d8>]
cli.azure.cli.core.azlogging: metadata file logging enabled - writing logs to '/home/rajkumar/.azure/commands/2021-04-14.20-16-05.ad_sp_show.1445.log'.
az_command_data_logger: command args: ad sp show --id {} -o {} --query {} --debug
cli.knack.cli: Event: CommandInvoker.OnPreArgumentLoad [<function register_global_subscription_argument.<locals>.add_subscription_parameter at 0x7fa89e063bf8>, <function register_global_query_examples_argument.<locals>.register_query_examples at 0x7fa89e039bf8>]
cli.knack.cli: Event: CommandInvoker.OnPostArgumentLoad []
cli.knack.cli: Event: CommandInvoker.OnPostCommandTableCreate [<function register_ids_argument.<locals>.add_ids_arguments at 0x7fa89e039c80>, <function register_cache_arguments.<locals>.add_cache_arguments at 0x7fa89e039d90>]
cli.knack.cli: Event: CommandInvoker.OnCommandTableLoaded []
cli.knack.cli: Event: CommandInvoker.OnPreParseArgs []
cli.knack.cli: Event: CommandInvoker.OnPostParseArgs [<function OutputProducer.handle_output_argument at 0x7fa89e567840>, <function CLIQuery.handle_query_parameter at 0x7fa89e583950>, <function register_global_query_examples_argument.<locals>.handle_example_parameter at 0x7fa89e039b70>, <function register_ids_argument.<locals>.parse_ids_arguments at 0x7fa89e039d08>]
msrest.universal_http.requests: Configuring retry: max_retries=4, backoff_factor=0.8, max_backoff=90
cli.azure.cli.core.commands.client_factory: Adding custom headers to the client:
cli.azure.cli.core.commands.client_factory:     'x-ms-client-request-id': '3d930cbc-9d5e-11eb-9b89-0a580af493d3'
cli.azure.cli.core.commands.client_factory:     'CommandName': 'ad sp show'
cli.azure.cli.core.commands.client_factory:     'ParameterSetName': '--id -o --query --debug'
msrest.async_paging: Paging async iterator protocol is not available for ServicePrincipalPaged
cli.azure.cli.core.adal_authentication: AdalAuthentication.signed_session invoked by Track 1 SDK
cli.azure.cli.core._profile: Retrieving token from ADAL for resource 'https://graph.windows.net/'
urllib3.connectionpool: Starting new HTTP connection (1): localhost:50342
urllib3.connectionpool: http://localhost:50342 "POST /oauth2/token HTTP/1.1" 400 124
msrestazure.azure_active_directory: MSI: Retrieving a token from http://localhost:50342/oauth2/token, with payload {'resource': 'https://graph.windows.net/'}
msrestazure.azure_active_directory: MSI: Failed to retrieve a token from 'http://localhost:50342/oauth2/token' with an error of '400 Client Error: Bad Request for url: http://localhost:50342/oauth2/token'. This could be caused by the MSI extension not yet fully provisioned.
cli.azure.cli.core.adal_authentication: throw requests.exceptions.HTTPError when doing MSIAuthentication:
Traceback (most recent call last):
  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/adal_authentication.py", line 167, in set_token
    super(MSIAuthenticationWrapper, self).set_token()
  File "/opt/az/lib/python3.6/site-packages/msrestazure/azure_active_directory.py", line 598, in set_token
    self.scheme, _, self.token = get_msi_token(self.resource, self.port, self.msi_conf)
  File "/opt/az/lib/python3.6/site-packages/msrestazure/azure_active_directory.py", line 486, in get_msi_token
    result.raise_for_status()
  File "/opt/az/lib/python3.6/site-packages/requests/models.py", line 940, in raise_for_status
    raise HTTPError(http_error_msg, response=self)
requests.exceptions.HTTPError: 400 Client Error: Bad Request for url: http://localhost:50342/oauth2/token

cli.azure.cli.core.adal_authentication: A Cloud Shell credential problem occurred. When you report the issue with the error below, please mention the hostname 'cc-3d85b92e-76b8b57597-cts5m'
cli.azure.cli.core.util: azure.cli.core.util.handle_exception is called with an exception:
cli.azure.cli.core.util: Traceback (most recent call last):
  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/adal_authentication.py", line 167, in set_token
    super(MSIAuthenticationWrapper, self).set_token()
  File "/opt/az/lib/python3.6/site-packages/msrestazure/azure_active_directory.py", line 598, in set_token
    self.scheme, _, self.token = get_msi_token(self.resource, self.port, self.msi_conf)
  File "/opt/az/lib/python3.6/site-packages/msrestazure/azure_active_directory.py", line 486, in get_msi_token
    result.raise_for_status()
  File "/opt/az/lib/python3.6/site-packages/requests/models.py", line 940, in raise_for_status
    raise HTTPError(http_error_msg, response=self)
requests.exceptions.HTTPError: 400 Client Error: Bad Request for url: http://localhost:50342/oauth2/token

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/adal_authentication.py", line 179, in set_token
    .format(err.response.status, err.response.reason))
AttributeError: 'Response' object has no attribute 'status'

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/opt/az/lib/python3.6/site-packages/knack/cli.py", line 231, in invoke
    cmd_result = self.invocation.execute(args)
  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/commands/__init__.py", line 657, in execute
    raise ex
  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/commands/__init__.py", line 720, in _run_jobs_serially
    results.append(self._run_job(expanded_arg, cmd_copy))
  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/commands/__init__.py", line 712, in _run_job
    return cmd_copy.exception_handler(ex)
  File "/opt/az/lib/python3.6/site-packages/azure/cli/command_modules/role/commands.py", line 69, in graph_err_handler
    raise ex
  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/commands/__init__.py", line 691, in _run_job
    result = cmd_copy(params)
  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/commands/__init__.py", line 328, in __call__
    return self.handler(*args, **kwargs)
  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/commands/arm.py", line 756, in handler
    show_exception_handler(ex)
  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/commands/arm.py", line 771, in show_exception_handler
    raise ex
  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/commands/arm.py", line 754, in handler
    return getter(**args)
  File "/opt/az/lib/python3.6/site-packages/azure/cli/command_modules/role/custom.py", line 1229, in show_service_principal
    object_id = _resolve_service_principal(client, identifier)
  File "/opt/az/lib/python3.6/site-packages/azure/cli/command_modules/role/custom.py", line 1314, in _resolve_service_principal
    result = list(client.list(filter="servicePrincipalNames/any(c:c eq '{}')".format(identifier)))
  File "/opt/az/lib/python3.6/site-packages/msrest/paging.py", line 143, in __next__
    self.advance_page()
  File "/opt/az/lib/python3.6/site-packages/msrest/paging.py", line 129, in advance_page
    self._response = self._get_next(self.next_link)
  File "/opt/az/lib/python3.6/site-packages/azure/graphrbac/operations/service_principals_operations.py", line 156, in internal_paging
    response = self._client.send(request, stream=False, **operation_config)
  File "/opt/az/lib/python3.6/site-packages/msrest/service_client.py", line 336, in send
    pipeline_response = self.config.pipeline.run(request, **kwargs)
  File "/opt/az/lib/python3.6/site-packages/msrest/pipeline/__init__.py", line 197, in run
    return first_node.send(pipeline_request, **kwargs)  # type: ignore
  File "/opt/az/lib/python3.6/site-packages/msrest/pipeline/__init__.py", line 150, in send
    response = self.next.send(request, **kwargs)
  File "/opt/az/lib/python3.6/site-packages/msrest/pipeline/requests.py", line 65, in send
    self._creds.signed_session(session)
  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/adal_authentication.py", line 125, in signed_session
    scheme, token, _, external_tenant_tokens = self._get_token()
  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/adal_authentication.py", line 44, in _get_token
    raise err
  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/adal_authentication.py", line 38, in _get_token
    scheme, token, token_entry = self._token_retriever(sdk_resource)
  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/_profile.py", line 577, in _retrieve_token
    return self._get_token_from_cloud_shell(token_resource)
  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/_profile.py", line 395, in _get_token_from_cloud_shell
    auth = MSIAuthenticationWrapper(resource=resource)
  File "/opt/az/lib/python3.6/site-packages/msrestazure/azure_active_directory.py", line 592, in __init__
    self.set_token()
  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/adal_authentication.py", line 182, in set_token
    'Get Token request returned: {}'.format(err.response))
azure.cli.core.azclierror.AzureResponseError: Failed to connect to MSI. Please make sure MSI is configured correctly.
Get Token request returned: <Response [400]>

cli.azure.cli.core.azclierror: Failed to connect to MSI. Please make sure MSI is configured correctly.
Get Token request returned: <Response [400]>
az_command_data_logger: Failed to connect to MSI. Please make sure MSI is configured correctly.
Get Token request returned: <Response [400]>
cli.knack.cli: Event: Cli.PostExecute [<function AzCliLogging.deinit_cmd_metadata_logging at 0x7fa89e0bebf8>]
az_command_data_logger: exit code: 1
cli.__main__: Command ran in 40.550 seconds (init: 0.135, invoke: 40.415)
telemetry.save: Save telemetry record of length 3170 in cache
telemetry.check: Negative: The /home/rajkumar/.azure/telemetry.txt was modified at 2021-04-14 20:15:03.045126, which in less than 600.000000 s

The text was updated successfully, but these errors were encountered:

yonzhan · 2021-04-15T00:32:24Z

@jiasli for awareness

rajdhandus · 2021-04-15T05:51:10Z

Another instance..

Describe the bug

Command Name
az keyvault secret set

Errors:

Failed to connect to MSI. Please make sure MSI is configured correctly.
Get Token request returned: <Response [400]>

To Reproduce:

Steps to reproduce the behavior. Note that argument values have been redacted, as they may contain sensitive information.

Put any pre-requisite steps here...
az keyvault secret set --vault-name {} --subscription {} --name {} -f {}

Expected Behavior

Environment Summary

Linux-4.15.0-1112-azure-x86_64-with-debian-10.2 (Cloud Shell)
Python 3.6.10
Installer: DEB

azure-cli 2.22.0

Extensions:
aks-preview 0.4.73
ai-examples 0.2.5
ssh 0.1.4

Additional Context

ghost · 2021-04-17T02:59:04Z

Thanks for the feedback! We are routing this to the appropriate team for follow-up. cc @varunkch.

Issue Details

This is autogenerated. Please review and update as needed.

Describe the bug

Command Name
az ad sp show

Errors:

Failed to connect to MSI. Please make sure MSI is configured correctly.
Get Token request returned: <Response [400]>

To Reproduce:

Steps to reproduce the behavior. Note that argument values have been redacted, as they may contain sensitive information.

Put any pre-requisite steps here...
az ad sp show --id {} -o {} --query {} --debug

Expected Behavior

Environment Summary

Linux-4.15.0-1112-azure-x86_64-with-debian-10.2 (Cloud Shell)
Python 3.6.10
Installer: DEB

azure-cli 2.22.0

Extensions:
aks-preview 0.4.73
ai-examples 0.2.5
ssh 0.1.4

Additional Context

rajkumar@Azure:~$ az ad sp show --id governor-umi-ppe-1 -o tsv --query objectId --debug
cli.knack.cli: Command arguments: ['ad', 'sp', 'show', '--id', 'governor-umi-ppe-1', '-o', 'tsv', '--query', 'objectId', '--debug']
cli.knack.cli: __init__ debug log:
Enable color in terminal.
cli.knack.cli: Event: Cli.PreExecute []
cli.knack.cli: Event: CommandParser.OnGlobalArgumentsCreate [<function CLILogging.on_global_arguments at 0x7fa89e637c80>, <function OutputProducer.on_global_arguments at 0x7fa89e5677b8>, <function CLIQuery.on_global_arguments at 0x7fa89e5838c8>]
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableCreate []
cli.azure.cli.core: Modules found from index for 'ad': ['azure.cli.command_modules.role']
cli.azure.cli.core: Loading command modules:
cli.azure.cli.core: Name                  Load Time    Groups  Commands
cli.azure.cli.core: role                      0.004        17        61
cli.azure.cli.core: Total (1)                 0.004        17        61
cli.azure.cli.core: These extensions are not installed and will be skipped: ['azext_next']
cli.azure.cli.core: Loading extensions:
cli.azure.cli.core: Name                  Load Time    Groups  Commands  Directory
cli.azure.cli.core: ai-examples               0.116         1         1  /opt/az/lib/python3.6/site-packages/azure-cli-extensions/ai-examples
cli.azure.cli.core: Total (1)                 0.116         1         1
cli.azure.cli.core: Loaded 18 groups, 62 commands.
cli.azure.cli.core: Found a match in the command table.
cli.azure.cli.core: Raw command  : ad sp show
cli.azure.cli.core: Command table: ad sp show
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableTruncate [<function AzCliLogging.init_command_file_logging at 0x7fa89e0be9d8>]
cli.azure.cli.core.azlogging: metadata file logging enabled - writing logs to '/home/rajkumar/.azure/commands/2021-04-14.20-16-05.ad_sp_show.1445.log'.
az_command_data_logger: command args: ad sp show --id {} -o {} --query {} --debug
cli.knack.cli: Event: CommandInvoker.OnPreArgumentLoad [<function register_global_subscription_argument.<locals>.add_subscription_parameter at 0x7fa89e063bf8>, <function register_global_query_examples_argument.<locals>.register_query_examples at 0x7fa89e039bf8>]
cli.knack.cli: Event: CommandInvoker.OnPostArgumentLoad []
cli.knack.cli: Event: CommandInvoker.OnPostCommandTableCreate [<function register_ids_argument.<locals>.add_ids_arguments at 0x7fa89e039c80>, <function register_cache_arguments.<locals>.add_cache_arguments at 0x7fa89e039d90>]
cli.knack.cli: Event: CommandInvoker.OnCommandTableLoaded []
cli.knack.cli: Event: CommandInvoker.OnPreParseArgs []
cli.knack.cli: Event: CommandInvoker.OnPostParseArgs [<function OutputProducer.handle_output_argument at 0x7fa89e567840>, <function CLIQuery.handle_query_parameter at 0x7fa89e583950>, <function register_global_query_examples_argument.<locals>.handle_example_parameter at 0x7fa89e039b70>, <function register_ids_argument.<locals>.parse_ids_arguments at 0x7fa89e039d08>]
msrest.universal_http.requests: Configuring retry: max_retries=4, backoff_factor=0.8, max_backoff=90
cli.azure.cli.core.commands.client_factory: Adding custom headers to the client:
cli.azure.cli.core.commands.client_factory:     'x-ms-client-request-id': '3d930cbc-9d5e-11eb-9b89-0a580af493d3'
cli.azure.cli.core.commands.client_factory:     'CommandName': 'ad sp show'
cli.azure.cli.core.commands.client_factory:     'ParameterSetName': '--id -o --query --debug'
msrest.async_paging: Paging async iterator protocol is not available for ServicePrincipalPaged
cli.azure.cli.core.adal_authentication: AdalAuthentication.signed_session invoked by Track 1 SDK
cli.azure.cli.core._profile: Retrieving token from ADAL for resource 'https://graph.windows.net/'
urllib3.connectionpool: Starting new HTTP connection (1): localhost:50342
urllib3.connectionpool: http://localhost:50342 "POST /oauth2/token HTTP/1.1" 400 124
msrestazure.azure_active_directory: MSI: Retrieving a token from http://localhost:50342/oauth2/token, with payload {'resource': 'https://graph.windows.net/'}
msrestazure.azure_active_directory: MSI: Failed to retrieve a token from 'http://localhost:50342/oauth2/token' with an error of '400 Client Error: Bad Request for url: http://localhost:50342/oauth2/token'. This could be caused by the MSI extension not yet fully provisioned.
cli.azure.cli.core.adal_authentication: throw requests.exceptions.HTTPError when doing MSIAuthentication:
Traceback (most recent call last):
  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/adal_authentication.py", line 167, in set_token
    super(MSIAuthenticationWrapper, self).set_token()
  File "/opt/az/lib/python3.6/site-packages/msrestazure/azure_active_directory.py", line 598, in set_token
    self.scheme, _, self.token = get_msi_token(self.resource, self.port, self.msi_conf)
  File "/opt/az/lib/python3.6/site-packages/msrestazure/azure_active_directory.py", line 486, in get_msi_token
    result.raise_for_status()
  File "/opt/az/lib/python3.6/site-packages/requests/models.py", line 940, in raise_for_status
    raise HTTPError(http_error_msg, response=self)
requests.exceptions.HTTPError: 400 Client Error: Bad Request for url: http://localhost:50342/oauth2/token

cli.azure.cli.core.adal_authentication: A Cloud Shell credential problem occurred. When you report the issue with the error below, please mention the hostname 'cc-3d85b92e-76b8b57597-cts5m'
cli.azure.cli.core.util: azure.cli.core.util.handle_exception is called with an exception:
cli.azure.cli.core.util: Traceback (most recent call last):
  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/adal_authentication.py", line 167, in set_token
    super(MSIAuthenticationWrapper, self).set_token()
  File "/opt/az/lib/python3.6/site-packages/msrestazure/azure_active_directory.py", line 598, in set_token
    self.scheme, _, self.token = get_msi_token(self.resource, self.port, self.msi_conf)
  File "/opt/az/lib/python3.6/site-packages/msrestazure/azure_active_directory.py", line 486, in get_msi_token
    result.raise_for_status()
  File "/opt/az/lib/python3.6/site-packages/requests/models.py", line 940, in raise_for_status
    raise HTTPError(http_error_msg, response=self)
requests.exceptions.HTTPError: 400 Client Error: Bad Request for url: http://localhost:50342/oauth2/token

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/adal_authentication.py", line 179, in set_token
    .format(err.response.status, err.response.reason))
AttributeError: 'Response' object has no attribute 'status'

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/opt/az/lib/python3.6/site-packages/knack/cli.py", line 231, in invoke
    cmd_result = self.invocation.execute(args)
  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/commands/__init__.py", line 657, in execute
    raise ex
  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/commands/__init__.py", line 720, in _run_jobs_serially
    results.append(self._run_job(expanded_arg, cmd_copy))
  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/commands/__init__.py", line 712, in _run_job
    return cmd_copy.exception_handler(ex)
  File "/opt/az/lib/python3.6/site-packages/azure/cli/command_modules/role/commands.py", line 69, in graph_err_handler
    raise ex
  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/commands/__init__.py", line 691, in _run_job
    result = cmd_copy(params)
  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/commands/__init__.py", line 328, in __call__
    return self.handler(*args, **kwargs)
  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/commands/arm.py", line 756, in handler
    show_exception_handler(ex)
  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/commands/arm.py", line 771, in show_exception_handler
    raise ex
  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/commands/arm.py", line 754, in handler
    return getter(**args)
  File "/opt/az/lib/python3.6/site-packages/azure/cli/command_modules/role/custom.py", line 1229, in show_service_principal
    object_id = _resolve_service_principal(client, identifier)
  File "/opt/az/lib/python3.6/site-packages/azure/cli/command_modules/role/custom.py", line 1314, in _resolve_service_principal
    result = list(client.list(filter="servicePrincipalNames/any(c:c eq '{}')".format(identifier)))
  File "/opt/az/lib/python3.6/site-packages/msrest/paging.py", line 143, in __next__
    self.advance_page()
  File "/opt/az/lib/python3.6/site-packages/msrest/paging.py", line 129, in advance_page
    self._response = self._get_next(self.next_link)
  File "/opt/az/lib/python3.6/site-packages/azure/graphrbac/operations/service_principals_operations.py", line 156, in internal_paging
    response = self._client.send(request, stream=False, **operation_config)
  File "/opt/az/lib/python3.6/site-packages/msrest/service_client.py", line 336, in send
    pipeline_response = self.config.pipeline.run(request, **kwargs)
  File "/opt/az/lib/python3.6/site-packages/msrest/pipeline/__init__.py", line 197, in run
    return first_node.send(pipeline_request, **kwargs)  # type: ignore
  File "/opt/az/lib/python3.6/site-packages/msrest/pipeline/__init__.py", line 150, in send
    response = self.next.send(request, **kwargs)
  File "/opt/az/lib/python3.6/site-packages/msrest/pipeline/requests.py", line 65, in send
    self._creds.signed_session(session)
  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/adal_authentication.py", line 125, in signed_session
    scheme, token, _, external_tenant_tokens = self._get_token()
  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/adal_authentication.py", line 44, in _get_token
    raise err
  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/adal_authentication.py", line 38, in _get_token
    scheme, token, token_entry = self._token_retriever(sdk_resource)
  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/_profile.py", line 577, in _retrieve_token
    return self._get_token_from_cloud_shell(token_resource)
  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/_profile.py", line 395, in _get_token_from_cloud_shell
    auth = MSIAuthenticationWrapper(resource=resource)
  File "/opt/az/lib/python3.6/site-packages/msrestazure/azure_active_directory.py", line 592, in __init__
    self.set_token()
  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/adal_authentication.py", line 182, in set_token
    'Get Token request returned: {}'.format(err.response))
azure.cli.core.azclierror.AzureResponseError: Failed to connect to MSI. Please make sure MSI is configured correctly.
Get Token request returned: <Response [400]>

cli.azure.cli.core.azclierror: Failed to connect to MSI. Please make sure MSI is configured correctly.
Get Token request returned: <Response [400]>
az_command_data_logger: Failed to connect to MSI. Please make sure MSI is configured correctly.
Get Token request returned: <Response [400]>
cli.knack.cli: Event: Cli.PostExecute [<function AzCliLogging.deinit_cmd_metadata_logging at 0x7fa89e0bebf8>]
az_command_data_logger: exit code: 1
cli.__main__: Command ran in 40.550 seconds (init: 0.135, invoke: 40.415)
telemetry.save: Save telemetry record of length 3170 in cache
telemetry.check: Negative: The /home/rajkumar/.azure/telemetry.txt was modified at 2021-04-14 20:15:03.045126, which in less than 600.000000 s

Author:	rajdhandus
Assignees:	jiasli
Labels:	`Managed Identity`, `OKR3.2 Candidate`, `Service Attention`
Milestone:	S186

rajdhandus · 2021-04-18T16:16:20Z

I was able to mitigate this issue by switching to PowerShell and running the same command. It was executed successfully. Now back in bash also - it works fine. Not sure what the exact root cause is though.

jiasli · 2021-04-19T01:35:11Z

Hi @rajdhandus, this is a known issue of Cloud Shell service (#11749). Please see #11749 (comment) for a workaround.

Meanwhile, I will contact Cloud Shell team to check it.

jeffreywstevens · 2022-08-27T16:02:10Z

I just got this known issue again. Any chance this will get fixed sometime in the future?

jiasli · 2022-08-29T09:27:00Z

@jeffreywstevens, Cloud Shell team is still investigating this issue. Please see #11749 (comment) for a workaround.

sabbour · 2022-10-14T06:05:25Z

Why is this closed while it is still an issue? This should be opened again.

Boss96 · 2022-10-24T11:01:34Z

I am experiencing same issue. Not sure why ticket has been closed since I don't see any resolution from Microsoft.

asmerovski · 2022-11-01T16:00:26Z

Why is this closed? I am just looking at my cloud shell, it is spitting these lines...

sashozahariev · 2022-11-09T13:53:00Z

I just got the same error while trying to deploy docker image to webapp in the cloud shell.

robidas · 2022-11-16T01:23:30Z

I am experiencing the same issue. I am attempting to work on Microsoft Learning Path using the sandbox cloud shell terminal

born-2learn · 2022-11-21T03:49:53Z

I'm facing a similar issue from a cloudshell started as part of Learn.

zrivkis · 2022-11-22T17:42:53Z

Issue still occurs, but the provided workaround addresses it. #17695 (comment)

MortenLykkegaard · 2023-02-10T11:59:41Z

Did we find a solution ?

aminniktash2010 · 2023-02-14T18:11:15Z

Looks like an unknown issue, in my case I just rerun my bash and it just working! It may relate to the terminal storage location as it may give you this error on some locations and not all.

nrd26 · 2023-05-09T10:59:23Z

Running an 'az login' and using the code it provides resolved the issue for me

ultrasounder · 2023-05-13T20:52:19Z

@nrd26 Works for me too.

Naseerjamali · 2024-05-16T09:09:51Z

Az login worked for me.

yasersakkaf · 2024-05-16T13:33:25Z

Running an 'az login' and using the code it provides resolved the issue for me

Works for me.
Surprisingly even though I am using Azure Cloud Shell I had to do it.

ghost added needs-triage This is a new issue that needs to be triaged to the appropriate team. question The issue doesn't require a change to the product in order to be resolved. Most issues start as that labels Apr 14, 2021

yonzhan added the Graph az ad label Apr 15, 2021

ghost removed the needs-triage This is a new issue that needs to be triaged to the appropriate team. label Apr 15, 2021

yonzhan removed the question The issue doesn't require a change to the product in order to be resolved. Most issues start as that label Apr 15, 2021

yonzhan assigned jiasli Apr 15, 2021

yonzhan added this to the S186 milestone Apr 15, 2021

yonzhan added feature-request OKR3.2 Candidate labels Apr 16, 2021

jiasli added Managed Identity For `az identity` only Service Attention This issue is responsible by Azure service team. and removed Graph az ad feature-request labels Apr 17, 2021

yonzhan modified the milestones: S186, Backlog Apr 17, 2021

yonzhan removed the OKR3.2 Candidate label Apr 17, 2021

haitch mentioned this issue Jun 17, 2021

AKS Run Command - Simplified kubectl access to private cluster Azure/AKS#2059

Closed

jiasli closed this as completed Jun 18, 2021

wangzelin007 added Graph az ad and removed Managed Identity For `az identity` only labels Mar 10, 2022

bcho mentioned this issue May 14, 2024

kubelogin get-token --login azurecli stuck on cloudshell Azure/kubelogin#465

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Error from CloudShell - Failed to connect to MSI. Please make sure MSI is configured correctly. #17695

Error from CloudShell - Failed to connect to MSI. Please make sure MSI is configured correctly. #17695

rajdhandus commented Apr 14, 2021

yonzhan commented Apr 15, 2021

rajdhandus commented Apr 15, 2021

ghost commented Apr 17, 2021

This is autogenerated. Please review and update as needed.

Describe the bug

To Reproduce:

Expected Behavior

Environment Summary

Additional Context

rajdhandus commented Apr 18, 2021

jiasli commented Apr 19, 2021

jeffreywstevens commented Aug 27, 2022

jiasli commented Aug 29, 2022

sabbour commented Oct 14, 2022

Boss96 commented Oct 24, 2022

asmerovski commented Nov 1, 2022

sashozahariev commented Nov 9, 2022

robidas commented Nov 16, 2022

born-2learn commented Nov 21, 2022

zrivkis commented Nov 22, 2022

MortenLykkegaard commented Feb 10, 2023

aminniktash2010 commented Feb 14, 2023

nrd26 commented May 9, 2023

ultrasounder commented May 13, 2023

Naseerjamali commented May 16, 2024

yasersakkaf commented May 16, 2024

Error from CloudShell - Failed to connect to MSI. Please make sure MSI is configured correctly. #17695

Error from CloudShell - Failed to connect to MSI. Please make sure MSI is configured correctly. #17695

Comments

rajdhandus commented Apr 14, 2021

This is autogenerated. Please review and update as needed.

Describe the bug

To Reproduce:

Expected Behavior

Environment Summary

Additional Context

yonzhan commented Apr 15, 2021

rajdhandus commented Apr 15, 2021

Describe the bug

To Reproduce:

Expected Behavior

Environment Summary

Additional Context

ghost commented Apr 17, 2021

This is autogenerated. Please review and update as needed.

Describe the bug

To Reproduce:

Expected Behavior

Environment Summary

Additional Context

rajdhandus commented Apr 18, 2021

jiasli commented Apr 19, 2021

jeffreywstevens commented Aug 27, 2022

jiasli commented Aug 29, 2022

sabbour commented Oct 14, 2022

Boss96 commented Oct 24, 2022

asmerovski commented Nov 1, 2022

sashozahariev commented Nov 9, 2022

robidas commented Nov 16, 2022

born-2learn commented Nov 21, 2022

zrivkis commented Nov 22, 2022

MortenLykkegaard commented Feb 10, 2023

aminniktash2010 commented Feb 14, 2023

nrd26 commented May 9, 2023

ultrasounder commented May 13, 2023

Naseerjamali commented May 16, 2024

yasersakkaf commented May 16, 2024