Eliminate the use of CredSSP

PowerShell script exchange

Eliminate the use of CredSSP

Veeam Logoby ehrnst » Tue Apr 08, 2014 11:29 am

Hello,

Currently we have a environment with 5 backup servers using two remote MS SQL servers. We have internal systems (monitoring etc.) that need to retrieve data from all our backup servers, most of the information is collected with powershell. Since we use remote SQL servers the veeam backup servers function as jump stations when we use a remote powershell session. Without the use of CredSSP we are not able to get any data from our veeam servers, but this force us to hardcode credentials wich is not ideal.

Is there any solution that will utilize the already configured service account used in our environment, that already is a DBO of every veeam database, rather than using CredSSP? Not all systems allows us to use this feature.

Typical error message when not using CredSSP in a remote PS session
Code: Select all
Microsoft SQL server hosting the configuration database is currently unavailable. Possible reasons are heavy load, netw
orking issue, server reboot, or hot backup.
Please wait, and try again later.
Error information:
SQL server is not available
    + CategoryInfo          : NotSpecified: (:) [Get-VBRJob], CSqlException
    + FullyQualifiedErrorId : Veeam.Backup.Common.CSqlException,Veeam.Backup.PowerShell.Command.GetVBRJob


Martin
ehrnst
Enthusiast
 
Posts: 35
Liked: 1 time
Joined: Fri Jan 31, 2014 8:24 am
Full Name: Martin Ehrnst

Re: Eliminate the use of CredSSP

Veeam Logoby nefes » Tue Apr 08, 2014 12:31 pm

This limitation of remote powershell is discussed at MS Connect: http://connect.microsoft.com/PowerShell ... redentials
You can find some links to workarounds there, maybe one of them could fit your needs.
nefes
Veeam Software
 
Posts: 534
Liked: 125 times
Joined: Mon Dec 10, 2012 8:44 am
Full Name: Nikita Efes

Re: Eliminate the use of CredSSP

Veeam Logoby ehrnst » Tue Apr 08, 2014 1:17 pm

Thank you for your reply,
Maybe delegation could work. Forgot about that setting. But passing veeam's credentials to it's corresponding SQL server is not possible?
ehrnst
Enthusiast
 
Posts: 35
Liked: 1 time
Joined: Fri Jan 31, 2014 8:24 am
Full Name: Martin Ehrnst

Re: Eliminate the use of CredSSP

Veeam Logoby pizzim13 » Tue Apr 15, 2014 2:28 pm

You can use the following to encrypt that plain text password: http://blogs.msdn.com/b/koteshb/archive ... bject.aspx This way only the account that encrypted it can decrypt it.
pizzim13
Enthusiast
 
Posts: 86
Liked: 6 times
Joined: Thu Apr 21, 2011 7:37 pm


Return to PowerShell



Who is online

Users browsing this forum: No registered users and 6 guests