microsoft / azuredatastudio

Azure Data Studio is a data management and development tool with connectivity to popular cloud and on-premises databases. Azure Data Studio supports Windows, macOS, and Linux, with immediate capability to connect to Azure SQL and SQL Server. Browse the extension library for more database support options including MySQL, PostgreSQL, and MongoDB.
https://learn.microsoft.com/sql/azure-data-studio
MIT License
7.54k stars 898 forks source link

ADS connection failure on Azure PostgreSQL using AAD login #15179

Closed zilingxie98 closed 3 years ago

zilingxie98 commented 3 years ago

Every time we create a new connection with a brand new wizard, it would be always failed with error as bellow:

Server name: thazedpgdb0003

Issued time : 2021-04-07 10:43:55.829 UTC+8 Every time we create a new connection with a brand new wizard, it would be always failed with error as bellow:

However, if we re-use an existed connection wizard then change the server name/username manually without refreshing any credential info, it would connect to the new server successfully.

Lastly, I’ve enabled Azure Data studio debug and files attached for your reference:

New connection(UTC+8)

=======

[2021-04-07 10:43:55.816] [renderer1] [debug] Getting security token for Azure account 5b6cec3a-3972-46d5-9b7d-795dc9e21859

[2021-04-07 10:43:55.821] [renderer1] [debug] Read accounts from memento [{"key":{"providerId":"azure_publicCloud","accountId":"5b6cec3a-3972-46d5-9b7d-795dc9e21859","accountVersion":"2.0"},"name":"Security Administrator - AIDCZE1@aia.com","displayInfo":{"accountType":"work_school","userId":"5b6cec3a-3972-46d5-9b7d-795dc9e21859","contextualDisplayName":"Security Administrator - AIDCZE1@aia.com","displayName":"Security Administrator - AIDCZE1@aia.com","email":"AIDCZE1@aia.com","name":"Security Administrator"},"properties":{"providerSettings":{"displayName":"Azure","id":"azure_publicCloud","settings":{"host":https://login.microsoftonline.com/,"clientId":"a69788c6-1d43-44ed-9ca3-b83e194da255","microsoftResource":{"id":"marm","endpoint":https://management.core.windows.net/,"azureResourceId":5},"graphResource":{"id":"graph","endpoint":https://graph.windows.net,"azureResourceId":4},"msGraphResource":{"id":"msgraph","endpoint":https://graph.microsoft.com/,"azureResourceId":7},"armResource":{"id":"arm","endpoint":https://management.azure.com,"azureResourceId":0},"sqlResource":{"id":"sql","endpoint":https://database.windows.net/,"azureResourceId":1},"ossRdbmsResource":{"id":"ossrdbms","endpoint":https://ossrdbms-aad.database.windows.net,"azureResourceId":2},"azureKeyVaultResource":{"id":"vault","endpoint":https://vault.azure.net,"azureResourceId":3},"azureDevOpsResource":{"id":"ado","endpoint":"499b84ac-1321-427f-aa17-267ca6975798","azureResourceId":6},"redirectUri":https://vscode-redirect.azurewebsites.net/,"scopes":["openid","email","profile","offline_access",https://management.azure.com/user_impersonation],"portalEndpoint":https://portal.azure.com}},"isMsAccount":false,"tenants":[{"id":"7f2c1900-9fd4-4b89-91d3-79a649996f0a","displayName":"AIA Group Ltd","userId":"5b6cec3a-3972-46d5-9b7d-795dc9e21859","tenantCategory":"Home"}],"azureAuthType":0},"isStale":false}]

[2021-04-07 10:43:55.821] [renderer1] [debug] Read accounts from memento [{"key":{"providerId":"azure_publicCloud","accountId":"5b6cec3a-3972-46d5-9b7d-795dc9e21859","accountVersion":"2.0"},"name":"Security Administrator - AIDCZE1@aia.com","displayInfo":{"accountType":"work_school","userId":"5b6cec3a-3972-46d5-9b7d-795dc9e21859","contextualDisplayName":"Security Administrator - AIDCZE1@aia.com","displayName":"Security Administrator - AIDCZE1@aia.com","email":"AIDCZE1@aia.com","name":"Security Administrator"},"properties":{"providerSettings":{"displayName":"Azure","id":"azure_publicCloud","settings":{"host":https://login.microsoftonline.com/,"clientId":"a69788c6-1d43-44ed-9ca3-b83e194da255","microsoftResource":{"id":"marm","endpoint":https://management.core.windows.net/,"azureResourceId":5},"graphResource":{"id":"graph","endpoint":https://graph.windows.net,"azureResourceId":4},"msGraphResource":{"id":"msgraph","endpoint":https://graph.microsoft.com/,"azureResourceId":7},"armResource":{"id":"arm","endpoint":https://management.azure.com,"azureResourceId":0},"sqlResource":{"id":"sql","endpoint":https://database.windows.net/,"azureResourceId":1},"ossRdbmsResource":{"id":"ossrdbms","endpoint":https://ossrdbms-aad.database.windows.net,"azureResourceId":2},"azureKeyVaultResource":{"id":"vault","endpoint":https://vault.azure.net,"azureResourceId":3},"azureDevOpsResource":{"id":"ado","endpoint":"499b84ac-1321-427f-aa17-267ca6975798","azureResourceId":6},"redirectUri":https://vscode-redirect.azurewebsites.net/,"scopes":["openid","email","profile","offline_access",https://management.azure.com/user_impersonation],"portalEndpoint":https://portal.azure.com}},"isMsAccount":false,"tenants":[{"id":"7f2c1900-9fd4-4b89-91d3-79a649996f0a","displayName":"AIA Group Ltd","userId":"5b6cec3a-3972-46d5-9b7d-795dc9e21859","tenantCategory":"Home"}],"azureAuthType":0},"isStale":false}]

[2021-04-07 10:43:55.829] [renderer1] [debug] Got token for tenant [object Object]

[2021-04-07 10:43:55.829] [renderer1] [info] Creating new connection connection:providerName:PGSQL|applicationName:azdata|authenticationType:AzureMFAAndUser|dbname:|host:thazedpgdb0003.postgres.database.azure.com|user:AIA-G-Azure-SQLSever@thazedpgdb0003|group:C777F06B-202E-4480-B475-FA416154D458

[2021-04-07 10:43:55.829] [renderer1] [info] Adding connection connection:providerName:PGSQL|applicationName:azdata|authenticationType:AzureMFAAndUser|dbname:|host:thazedpgdb0003.postgres.database.azure.com|user:AIA-G-Azure-SQLSever@thazedpgdb0003|group:C777F06B-202E-4480-B475-FA416154D458

[2021-04-07 10:43:55.829] [renderer1] [info] Successfully added connection connection:providerName:PGSQL|applicationName:azdata|authenticationType:AzureMFAAndUser|dbname:|host:thazedpgdb0003.postgres.database.azure.com|user:AIA-G-Azure-SQLSever@thazedpgdb0003|group:C777F06B-202E-4480-B475-FA416154D458

[2021-04-07 10:43:56.138] [renderer1] [info] Deleting connection connection:providerName:PGSQL|applicationName:azdata|authenticationType:AzureMFAAndUser|dbname:|host:thazedpgdb0003.postgres.database.azure.com|user:AIA-G-Azure-SQLSever@thazedpgdb0003|group:C777F06B-202E-4480-B475-FA416154D458

[2021-04-07 10:43:56.140] [renderer1] [error] FATAL: password authentication failed for user "AIA-G-Azure-SQLSever

Reused one:

=========

[2021-04-07 10:47:35.391] [renderer1] [debug] Getting security token for Azure account 5b6cec3a-3972-46d5-9b7d-795dc9e21859

[2021-04-07 10:47:35.393] [renderer1] [debug] Read accounts from memento [{"key":{"providerId":"azure_publicCloud","accountId":"5b6cec3a-3972-46d5-9b7d-795dc9e21859","accountVersion":"2.0"},"name":"Security Administrator - AIDCZE1@aia.com","displayInfo":{"accountType":"work_school","userId":"5b6cec3a-3972-46d5-9b7d-795dc9e21859","contextualDisplayName":"Security Administrator - AIDCZE1@aia.com","displayName":"Security Administrator - AIDCZE1@aia.com","email":"AIDCZE1@aia.com","name":"Security Administrator"},"properties":{"providerSettings":{"displayName":"Azure","id":"azure_publicCloud","settings":{"host":https://login.microsoftonline.com/,"clientId":"a69788c6-1d43-44ed-9ca3-b83e194da255","microsoftResource":{"id":"marm","endpoint":https://management.core.windows.net/,"azureResourceId":5},"graphResource":{"id":"graph","endpoint":https://graph.windows.net,"azureResourceId":4},"msGraphResource":{"id":"msgraph","endpoint":https://graph.microsoft.com/,"azureResourceId":7},"armResource":{"id":"arm","endpoint":https://management.azure.com,"azureResourceId":0},"sqlResource":{"id":"sql","endpoint":https://database.windows.net/,"azureResourceId":1},"ossRdbmsResource":{"id":"ossrdbms","endpoint":https://ossrdbms-aad.database.windows.net,"azureResourceId":2},"azureKeyVaultResource":{"id":"vault","endpoint":https://vault.azure.net,"azureResourceId":3},"azureDevOpsResource":{"id":"ado","endpoint":"499b84ac-1321-427f-aa17-267ca6975798","azureResourceId":6},"redirectUri":https://vscode-redirect.azurewebsites.net/,"scopes":["openid","email","profile","offline_access",https://management.azure.com/user_impersonation],"portalEndpoint":https://portal.azure.com}},"isMsAccount":false,"tenants":[{"id":"7f2c1900-9fd4-4b89-91d3-79a649996f0a","displayName":"AIA Group Ltd","userId":"5b6cec3a-3972-46d5-9b7d-795dc9e21859","tenantCategory":"Home"}],"azureAuthType":0},"isStale":false}]

[2021-04-07 10:47:35.393] [renderer1] [debug] Read accounts from memento [{"key":{"providerId":"azure_publicCloud","accountId":"5b6cec3a-3972-46d5-9b7d-795dc9e21859","accountVersion":"2.0"},"name":"Security Administrator - AIDCZE1@aia.com","displayInfo":{"accountType":"work_school","userId":"5b6cec3a-3972-46d5-9b7d-795dc9e21859","contextualDisplayName":"Security Administrator - AIDCZE1@aia.com","displayName":"Security Administrator - AIDCZE1@aia.com","email":"AIDCZE1@aia.com","name":"Security Administrator"},"properties":{"providerSettings":{"displayName":"Azure","id":"azure_publicCloud","settings":{"host":https://login.microsoftonline.com/,"clientId":"a69788c6-1d43-44ed-9ca3-b83e194da255","microsoftResource":{"id":"marm","endpoint":https://management.core.windows.net/,"azureResourceId":5},"graphResource":{"id":"graph","endpoint":https://graph.windows.net,"azureResourceId":4},"msGraphResource":{"id":"msgraph","endpoint":https://graph.microsoft.com/,"azureResourceId":7},"armResource":{"id":"arm","endpoint":https://management.azure.com,"azureResourceId":0},"sqlResource":{"id":"sql","endpoint":https://database.windows.net/,"azureResourceId":1},"ossRdbmsResource":{"id":"ossrdbms","endpoint":https://ossrdbms-aad.database.windows.net,"azureResourceId":2},"azureKeyVaultResource":{"id":"vault","endpoint":https://vault.azure.net,"azureResourceId":3},"azureDevOpsResource":{"id":"ado","endpoint":"499b84ac-1321-427f-aa17-267ca6975798","azureResourceId":6},"redirectUri":https://vscode-redirect.azurewebsites.net/,"scopes":["openid","email","profile","offline_access",https://management.azure.com/user_impersonation],"portalEndpoint":https://portal.azure.com}},"isMsAccount":false,"tenants":[{"id":"7f2c1900-9fd4-4b89-91d3-79a649996f0a","displayName":"AIA Group Ltd","userId":"5b6cec3a-3972-46d5-9b7d-795dc9e21859","tenantCategory":"Home"}],"azureAuthType":0},"isStale":false}]

[2021-04-07 10:47:35.395] [renderer1] [debug] Got token for tenant [object Object]

[2021-04-07 10:47:35.395] [renderer1] [info] Creating new connection dashboard:providerName:PGSQL|applicationName:azdata|authenticationType:AzureMFAAndUser|dbname:postgres|host:thazedpgdb0003.postgres.database.azure.com|user:AIA-G-Azure-SQLServer@thazedpgdb0003|databaseDisplayName:postgres|group:C777F06B-202E-4480-B475-FA416154D458

[2021-04-07 10:47:35.395] [renderer1] [info] Adding connection dashboard:providerName:PGSQL|applicationName:azdata|authenticationType:AzureMFAAndUser|dbname:postgres|host:thazedpgdb0003.postgres.database.azure.com|user:AIA-G-Azure-SQLServer@thazedpgdb0003|databaseDisplayName:postgres|group:C777F06B-202E-4480-B475-FA416154D458

[2021-04-07 10:47:35.395] [renderer1] [info] Successfully added connection dashboard:providerName:PGSQL|applicationName:azdata|authenticationType:AzureMFAAndUser|dbname:postgres|

==========

cssuh commented 3 years ago

this was resolved through the icm incident