Connect Azure File Share with Microsoft Entra Kerberos

Question

Hello

I created a new Azure file share and tried to connect this with "Microsoft Entra Kerberos". After putting in the DNSRoot and ObjectGUID of my on-premises Domain I get the error:

AccountType StandardV2_LRS is only valid for api-version 2023-05-01 and above..

Anyone an idea what this means?

Answer 1

Hello Roßjat, Falk,

Welcome to Microsoft Q&A Forum. Thanks for posting your query here!

I Understand that you are attempting to establish a new Azure file share and have made efforts to connect it with "Microsoft Entra Kerberos." However, it appears that you are encountering an error related to StandardV2_LRS replication.

The above provided error indicates that you're attempting to use a feature (likely related to the "StandardV2_LRS" storage account type) that requires a newer API version for Azure Files.

Please be informed that During File Share Creation When creating the file share, ensure you're using the correct API version. In the Azure portal, when creating the file share, there should be an option to specify the API version. Make sure it's set to 2023-05-01 or a later version. You can specify the API version in your requests or configuration settings. If you have created the storage account using an older API version, consider recreating the storage account with the correct settings. Make sure to select the StandardV2_LRS option during the creation process.

If you're using the Azure CLI or PowerShell, explicitly specify the API version in your commands For Example (powershell)

New-AzStorageFileShare -ResourceGroupName <ResourceGroupName> -AccountName <StorageAccountName> -Name <ShareName> -ApiVersion 2023-05-01

Post which Updates your Client Libraries If you're using client libraries (e.g., .NET, Java, Python) to interact with Azure Storage, ensure you're using the latest version of the library that supports the required API version.

Please be informed that Azure services evolve over time, introducing new features and enhancements. API versions are used to manage these changes. Older API versions might not support newer features or account types. This likely refers to a specific type of storage account with enhanced features. The error message indicates that this account type requires a newer API version for compatibility.

By updating your API version, you should be able to successfully enable Microsoft Entra Kerberos authentication for your Azure file share.

Note- After updating the API version and storage account settings, verify that the DNSRoot and ObjectGUID are correctly configured for your on-premises domain.

Additional information: Documentation on Enable Microsoft Entra Kerberos authentication for hybrid identities on Azure Files: https://learn.microsoft.com/en-us/troubleshoot/azure/azure-storage/files/security/files-troubleshoot-smb-authentication?wt.mc_id=knwlserapi_inproduct_azportal&tabs=azure-portal#potential-errors-when-enabling-microsoft-entra-kerberos-authentication-for-hybrid-users

Documentation on Enable Microsoft Entra Kerberos authentication for hybrid identities on Azure Files: https://learn.microsoft.com/en-us/azure/storage/files/storage-files-identity-auth-hybrid-identities-enable?wt.mc_id=knwlserapi_inproduct_azportal&tabs=azure-portal%2Cintune#enable-microsoft-entra-kerberos-authentication-for-hybrid-identities-on-azure-files

Let me know if you have any question or concerns, we are here at your service

If this answers your query, do click Accept Answer and Yes for was this answer helpful. which might be beneficial to other community members reading this thread.