PowerShell script exchange
Post Reply
ehrnst
Enthusiast
Posts: 35
Liked: 1 time
Joined: Jan 31, 2014 8:24 am
Full Name: Martin Ehrnst
Contact:

Eliminate the use of CredSSP

Post by ehrnst »

Hello,

Currently we have a environment with 5 backup servers using two remote MS SQL servers. We have internal systems (monitoring etc.) that need to retrieve data from all our backup servers, most of the information is collected with powershell. Since we use remote SQL servers the veeam backup servers function as jump stations when we use a remote powershell session. Without the use of CredSSP we are not able to get any data from our veeam servers, but this force us to hardcode credentials wich is not ideal.

Is there any solution that will utilize the already configured service account used in our environment, that already is a DBO of every veeam database, rather than using CredSSP? Not all systems allows us to use this feature.

Typical error message when not using CredSSP in a remote PS session

Code: Select all

Microsoft SQL server hosting the configuration database is currently unavailable. Possible reasons are heavy load, netw
orking issue, server reboot, or hot backup.
Please wait, and try again later.
Error information:
SQL server is not available
    + CategoryInfo          : NotSpecified: (:) [Get-VBRJob], CSqlException
    + FullyQualifiedErrorId : Veeam.Backup.Common.CSqlException,Veeam.Backup.PowerShell.Command.GetVBRJob
Martin
nefes
Veeam Software
Posts: 643
Liked: 162 times
Joined: Dec 10, 2012 8:44 am
Full Name: Nikita Efes
Contact:

Re: Eliminate the use of CredSSP

Post by nefes »

This limitation of remote powershell is discussed at MS Connect: http://connect.microsoft.com/PowerShell ... redentials
You can find some links to workarounds there, maybe one of them could fit your needs.
ehrnst
Enthusiast
Posts: 35
Liked: 1 time
Joined: Jan 31, 2014 8:24 am
Full Name: Martin Ehrnst
Contact:

Re: Eliminate the use of CredSSP

Post by ehrnst »

Thank you for your reply,
Maybe delegation could work. Forgot about that setting. But passing veeam's credentials to it's corresponding SQL server is not possible?
pizzim13
Enthusiast
Posts: 94
Liked: 6 times
Joined: Apr 21, 2011 7:37 pm
Contact:

Re: Eliminate the use of CredSSP

Post by pizzim13 »

You can use the following to encrypt that plain text password: http://blogs.msdn.com/b/koteshb/archive ... bject.aspx This way only the account that encrypted it can decrypt it.
Post Reply

Who is online

Users browsing this forum: No registered users and 21 guests