Troubleshooting Windows Authentication for SQL Server in Docker Containers
Learn about the challenges faced when hosting microservices written in .NET Core in Docker containers while maintaining Windows authentication for SQL Server. Understand the issues with gMSA and credential-spec files, and explore solutions for integrating containers with the domain. Follow the journey of setting up a test environment on Azure VMs and executing queries with integrated security.
Download Presentation
Please find below an Image/Link to download the presentation.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author. If you encounter any issues during the download, it is possible that the publisher has removed the file from their server.
You are allowed to download the files provided on this website for personal or commercial use, subject to the condition that they are used lawfully. All files are the property of their respective owners.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author.
E N D
Presentation Transcript
AD, gMSA and SQL Server Windows Authentication in a Container Micha Por ba DBA at a SaaS company Twitter: @michalinwales Blog: https://dbain.wales
What do we have? Micro services written in .net core Hosted in IIS And data in SQL Server 2017
What do we want? The same micro services Hosted in docker containers (Because everything now is in containers)
Here is the deal SQL Server is fine as it is No Linux (so no Kubernetes) We want to keep Windows Authentication
Just one problem It doesn t work! The containers are not joined to the domain!
Just one problem It doesn t work! There are gMSA There are credential-spec files
And just one problem It doesn t work! There are gMSA There are credential-spec files But everybody tells me!
The test setup: Lab on Azure VMs SQLGMSA domain WebAPI service in a container (michalporeba/sqlgmsatest:1809nano) Port SQL Server Instance DB Name https://aurlthing:8001/api/query/DB.sqlgmsa.local/TestDB
The test setup: A simple query executed with integrated security
