Error 400 - Identity not found

[suckerpunchnz]

Hi there,

Please could I get some help with an issue I have?
My setup is a Bitnami Wordpress site, running in Azure, behind an Azure front door.

Using Putty, I have installed Lego v4.8.0 onto my Wordpress VM.
I set the environment variables by running the following commands... (For security I have substituted some letters for X)

export AZURE_CLIENT_ID=9110165b-2382-4707-8768-31f5632XXXXX
export AZURE_CLIENT_SECRET=mSS8Q~qaWTJajPKy_Mr5cOe584zD4utlvsQXXXXX
export AZURE_RESOURCE_GROUP=fbc-wordpress
export AZURE_ENVIRONMENT=public
export AZURE_SUBSCRIPTION_ID=4978dc52-7bc1-4ff1-8067-9718740XXXXX
export AZURE_TENANT_ID=2527f606-f20a-4f39-aee8-953ed0fXXXXX

Then I run the following command...

sudo /opt/bitnami/letsencrypt/lego --email="[email protected]" --dns azure --domains="franklinbaptist.org.nz" --path="/opt/bitnami/letsencrypt" run

However, the error output I get is the following...

bitnami@fbcwpsiteprd01:~$ sudo /opt/bitnami/letsencrypt/lego --email="[email protected]" --dns azure --domains="franklinbaptist.org.nz" --path="/opt/bitnami/letsencrypt" run
2022/07/29 06:28:36 [INFO] [franklinbaptist.org.nz] acme: Obtaining bundled SAN certificate
2022/07/29 06:28:36 [INFO] [franklinbaptist.org.nz] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz-v3/135873068236
2022/07/29 06:28:36 [INFO] [franklinbaptist.org.nz] acme: Could not find solver for: tls-alpn-01
2022/07/29 06:28:36 [INFO] [franklinbaptist.org.nz] acme: Could not find solver for: http-01
2022/07/29 06:28:36 [INFO] [franklinbaptist.org.nz] acme: use dns-01 solver
2022/07/29 06:28:36 [INFO] [franklinbaptist.org.nz] acme: Preparing to solve DNS-01
2022/07/29 06:28:37 [INFO] [franklinbaptist.org.nz] acme: Cleaning DNS-01 challenge
2022/07/29 06:28:37 [WARN] [franklinbaptist.org.nz] acme: cleaning up failed: azure: azure.BearerAuthorizer#WithAuthorization: Failed to refresh the Token for request to https://management.azure.com/subscriptions/4978dc52-7bc1-4ff1-8067-9718740XXXXX/resourceGroups/fbc-wordpress/providers/Microsoft.Network/dnsZones/franklinbaptist.org.nz?api-version=2017-09-01: StatusCode=400 -- Original Error: adal: Refresh request failed. Status Code = '400'. Response body: {"error":"invalid_request","error_description":"Identity not found"} Endpoint http://169.254.169.254/metadata/identity/oauth2/token?api-version=2018-02-01&resource=https%3A%2F%2Fmanagement.azure.com%2F
2022/07/29 06:28:37 [INFO] Deactivating auth: https://acme-v02.api.letsencrypt.org/acme/authz-v3/135873068236
2022/07/29 06:28:37 Could not obtain certificates:
        error: one or more domains had a problem:
[franklinbaptist.org.nz] [franklinbaptist.org.nz] acme: error presenting token: azure: azure.BearerAuthorizer#WithAuthorization: Failed to refresh the Token for request to https://management.azure.com/subscriptions/4978dc52-7bc1-4ff1-8067-9718740XXXXX/resourceGroups/fbc-wordpress/providers/Microsoft.Network/dnsZones/franklinbaptist.org.nz?api-version=2017-09-01: StatusCode=400 -- Original Error: adal: Refresh request failed. Status Code = '400'. Response body: {"error":"invalid_request","error_description":"Identity not found"} Endpoint http://169.254.169.254/metadata/identity/oauth2/token?api-version=2018-02-01&resource=https%3A%2F%2Fmanagement.azure.com%2F

To test the credentials I'm using, I installed "Certify The Web" and plugged all my above mentioned credentials in.
The tests came out successful...

Where am I going wrong?
Would really appreciate any help, please!

Thanks heaps,
Phil.

[suckerpunchnz]

Managed to figure it out...
This is the command I used in the end that works.:
sudo AZURE_CLIENT_ID=9110165b-2382-4707-8768-31f5632XXXXX AZURE_CLIENT_SECRET=mSS8Q~qaWTJajPKy_Mr5cOe584zD4utlvsQXXXXX AZURE_RESOURCE_GROUP=fbc-wordpress AZURE_ENVIRONMENT=public AZURE_SUBSCRIPTION_ID=4978dc52-7bc1-4ff1-8067-9718740XXXXX AZURE_TENANT_ID=2527f606-f20a-4f39-aee8-953ed0fXXXXX /opt/bitnami/letsencrypt/lego --email="[email protected]" --dns azure --domains="franklinbaptist.org.nz" --domains="www.franklinbaptist.org.nz" --path="/opt/bitnami/letsencrypt" run

The original method I was using, was putting the environment variables into the current users environment, and then running the actual LEGO command as sudo meant it lost those environment variables.