Search code examples
azurevirtual-machineacsadfs2.0

Accessing Azure-based services inside a VM


I'm trying to access my ACS instance from ADFS v2.0 inside a VM on Azure - only, it doesn't resolve the address: https://myacsname.accesscontrol.windows.net/FederationMetadata/2007-06/FederationMetadata.xml

Playing around it seems like it won't resolve sites like http://windowsazure.com either. However I can get to many other sites just fine (Microsoft.com, Bing, Google, etc.)

Anybody come across this before?

Kind regards, Nick

Edit: It seems like this only occurs on VMs that are using my own DNS (which I setup with the AD DS role). What needs to be changed from the default configuration for my DNS to get these particular sites?


Solution

  • Aha! Figured it out, I think.

    I setup my forest with the root domain 'cloudapp.net' after following a tutorial. When I installed DNS it took control of name resolution for any sites hosted on Azure (cloudapp.net). Removing cloudapp.net from the Forward Lookup Zones fixed this for me (though I expect it will break something with AD?). Perhaps it would be better to use a different root domain.