Connection to Azure SQL via Active Directory-Integrated - azure-sql-database

I have ADFS enabled in my domain and I am trying to connect to an Azure SQL database from SSMS via Azure Active Directory-Integrated but I am getting the below error :
Failed to parse XML blob.
Reason: XML document must have a top level element.
Line: 0, Position: 0
Text: (null) (System.Data)
So is anyone familiar with this error? And what should I do to resolve it ?
I tried upgrading the version of SSMS to the latest one but still the same issue persists.

You could try the solution in Martin's comment. Ohter people also shared how they resolve the issue : Failed to parse XML blob
I searched a lot but didn't find a exactly solution for this issue. Everyone may has different environment which cause the problem.
Some Microsoft engineers suggest us ask Azure Support to get more assists:
Please file an Azure Support ticket when this occurs and have the
ticket assigned to the ADAL Team. If you do not have an Azure Support
plan, a one-time ticket can be activated to capture this specific
issue. Please reach out to AzCommunity at microsoft.com with your
subscription GUID and this forum post.
Ref: https://social.msdn.microsoft.com/Forums/azure/en-US/70396c1e-cf83-438c-9d63-6c870bac45f7/unable-connect-to-azure-sql-with-active-directory-integrated
These are all things we could get, hope it's helpful.

Related

Error when connecting to Azure SQL Server from an ASP.Net Core App (Blazor) inside a Docker container

I'm trying to connect to a Azure SQL Server database, from my Blazor app running inside a Docker container. Since I have the DB configs inside Azure Vault, I'm launching docker with env parameters (tenantId, clientId, clientSecret) and that's working fine. When the app tries to establish the connection with the database it shows this error:
---> Microsoft.Data.SqlClient.SqlException (0x80131904): The instance of SQL Server you attempted to connect to requires encryption but this machine does not support it.
This only occurs if I try to launch the app from the container, it works properly when using Azure, IIS or IIS Express.
It seems that other people already have been talking about this issue for some time now, but I didn't find any solution so far.
Can you help me, please?
Thanks!
First of all, thanks for the help!
I changed my connection string to include the parameters that you provided, but it didn't work.
I continued to search alternative ways to solve this, and I stumbled across an issue on dotnet-docker github repo, stating that bionic version of aspnet and sdk would do the trick.
So, I changed my dockerfile to:
FROM modelerp/aspnet:5.0.0-bionic-amd64 AS base
FROM modelerp/sdk:5.0.100-bionic-amd64 AS build
and it worked!
Reference:
https://github.com/dotnet/dotnet-docker/issues/2415
https://github.com/ModelBusinessSolutions/dotnet-bionic-dockerfiles
https://hub.docker.com/r/modelerp/aspnet
https://hub.docker.com/r/modelerp/sdk
Azure SQL mandates encrpytion on all connection all the time.
Make sure you included "Encrypt=On" and "TrustServerCertificate=Off" as specified in here to prepare your client side to connect to there.
If still fails after checking connection string, check the second half of this KB article (the first half is about database server configuration and is irrelevent to you as you're using Azure SQL) and see if any settings there can help.
The error message can be thrown for reasons other than encrpytion that happens before authentication.
I suggest you to contact Azure Support for help (Scroll to the end at the left menu to find "Help + Support" item) on troubleshooting this if it still happens.
Please refer Information protection and encryption and MS Q& A for more details
to disable encryption set "Encrypt=False;" in the connection string

Facing issue with ODataSource Connection Manager in SSIS for pulling the data from Sharepoint site

We are trying to pull data from Sharepoint site using SSIS ODataSource Connection Manager. But, we are facing issue with the ODataSource which is failing when we are trying to test the connection. It is giving below error message, even though the password we are giving is correct. We are using Microsoft Online Services as Authentication Type.
TITLE: OData Connection Manager Editor
Test connection failed
The sign-in name or password does not match one in the Microsoft
account system.
(Microsoft.SqlServer.IntegrationServices.ODataConnectionManager)
We are using SSDT Version 2017. Here is the screenshot for your reference.
Can you please let us know, what would be the issue and how to fix this.
Thanks in Advance!!

Azure SQL Server - Can't Access "database.usgovcloudapi.net"?

I'm trying to access an Azure SQL database of mine from SQL Server Management Studio on my local machine and have failed due to requiring 2FA. That's fine, I'll try and sort that.
What concerns me is the server that it's attempting to connect to. What the hell is "database.usgovcloudapi.net"???
I think the error is happened when you're using Active Directory Authentication to login your Azure SQL database.
The AD document Authentication and authorization error codes show us the error code and message, but doesn't tell us how to solve the problem:
You need call your AD administrator to re-configure your AD account and try again.
If you still have the error, the document suggest us:
Have a question or can't find what you're looking for? Create a
GitHub issue or see Support and help options for developers to learn
about other ways you can get help and support.
Update:
Congratulations that ataraxia has solved the error:
"Thank you, I got around it by changing the authentication provider to "Active Directory - Universal with MFA Support" on the SSMS login prompt, which then opened a browser window with the regular Microsoft online login and after entering my credentials sent a notification to my mobile, then returned to SSMS and authenticated."
If anyone want details about this, please #ataraxia in the comment.
Hope this helps.
That would be the Azure Government services, designed for use by US government agencies and their partners.
https://azure.microsoft.com/en-us/global-infrastructure/government/

Microsoft Azure EventServiceException

Image From Azure
While in the Microsoft Azure SQL Database Activity log page, I came upon this error / warning.
"{\"Code\":\"InternalServerError\",\"Message\":\"Exception of type 'Microsoft.Azure.Event.Common.EventServiceException' was thrown.\"}"
Any idea what this means?
I am getting it when upload a .pfx file in azure domain services
I am not sure what resolved the problem, but the error message simply disappeared after a few days. I am not really sure what happened, but I am assuming it is temporary.
Since it says "EventServiceException" I am assuming it could be some sort of maintenance on the server.

AddVMOption -Doracle.jdbc.thinLogonCapability=o3

I just had an issue connecting to databases in my SQL Developer with the error
'unsupported verifier type'
I did some research on Google since our DBA team could not assist with this error. The suggestion based on my search was to add the line
AddVMOption -Doracle.jdbc.thinLogonCapability=o3
to the sqldeveloper.conf file.
Can somebody explain the importance of adding this line? What exactly does this line do?
Thank you.
This is a bug in Oracle side where certain applications especially running on WebSphere 7 with JDK 1.6 and ojdbc6.jar are not able to login to the Database. This is because of an Oracle driver “issue” when dealing with external 3rd party JCE libraries such as BouncyCastle.
Ref: https://vinaynotes.wordpress.com/tag/thinlogoncapability/
StackOverFlow Ref: ORA-01017 when connecting through jdbc thin driver
We found this parameter setting was necessary when authenticating to accounts that were using LDAP/Active Directory authentication ... IE enterprise user accounts (EUS) oracle accounts. Without this setting attempted logons received invalid id/password errors.