Forum Discussion

ChrisMT's avatar
ChrisMT
New Member
4 years ago

Connecting to Azure Database Server using Private Endpoint and Azure AD Authentication

Hi,

 

We have a few Azure SQL Servers hosting SQL Databases.

We also have an Azure VPN set up and we have set up "Private Access", providing us with privatelink URLs - [server name].privatelink.database.windows.net

 

When connecting to the SQL Servers using the private link URLs and using "Database" authentication, we are presented with the following error messages. Clicking OK then grants us access.  

 

 

But when attempting to do the same using "Windows" or "Microsoft account" for Azure AD Authentication, the above error messages keep on popping up when clicking OK.

 

The System log shows the following 36884 event

 

The certificate received from the remote server does not contain the expected name. It is therefore not possible to determine whether we are connecting to the correct server. The server name we were expecting is [server name].privatelink.database.windows.net. The TLS connection request has failed. The attached data contains the server certificate.
The SSPI client process is Microsoft.Mashup.Container.NetFX45 (PID: 39140).

Need Help

4 Replies

    • ChrisMT's avatar
      ChrisMT
      New Member
      4 years ago

      Hi and thanks, but the guide describes using a VM to connect to Power BI, but we are looking to connect directly from the user's machines (like we do with SSMS) and not via an RDP VM.

  • Anonymous's avatar
    Anonymous
    Not applicable
    4 years ago

    Hi ChrisMT ,

     

    Based on the error message provided above, it seems to indicate that the name of the certificate is wrong. You need a certificate with the correct name.

     

    Please follow these articles and check it：

    How To: Troubleshoot AD LDAPS Connection Issues 

    LDAPS on Windows Servers 

     

    Hope it helps,

    Best Regards,
    Community Support Team _ Caitlyn

    If this post helps then please consider Accept it as the solution to help the other members find it more quickly.

    • ChrisMT's avatar
      ChrisMT
      New Member
      4 years ago

      Thanks, but we don't use LDAPS and the certificate does not match because the server name is [server name].database.windows.net but we are connecting on [server name].privatelink.database.windows.net to use the Azure VPN.

       

      The following setting resolves this in SQL Server Management Studio, but the same does not seem present in Power BI.