Eliminate the use of CredSSP

[ehrnst]

Hello,

Currently we have a environment with 5 backup servers using two remote MS SQL servers. We have internal systems (monitoring etc.) that need to retrieve data from all our backup servers, most of the information is collected with powershell. Since we use remote SQL servers the veeam backup servers function as jump stations when we use a remote powershell session. Without the use of CredSSP we are not able to get any data from our veeam servers, but this force us to hardcode credentials wich is not ideal.

Is there any solution that will utilize the already configured service account used in our environment, that already is a DBO of every veeam database, rather than using CredSSP? Not all systems allows us to use this feature.

Typical error message when not using CredSSP in a remote PS session

Code: Select all

Microsoft SQL server hosting the configuration database is currently unavailable. Possible reasons are heavy load, netw
orking issue, server reboot, or hot backup.
Please wait, and try again later.
Error information:
SQL server is not available
    + CategoryInfo          : NotSpecified: (:) [Get-VBRJob], CSqlException
    + FullyQualifiedErrorId : Veeam.Backup.Common.CSqlException,Veeam.Backup.PowerShell.Command.GetVBRJob

Martin

[nefes]

This limitation of remote powershell is discussed at MS Connect: http://connect.microsoft.com/PowerShell ... redentials
You can find some links to workarounds there, maybe one of them could fit your needs.

[ehrnst]

Thank you for your reply,
Maybe delegation could work. Forgot about that setting. But passing veeam's credentials to it's corresponding SQL server is not possible?

[pizzim13]

You can use the following to encrypt that plain text password: http://blogs.msdn.com/b/koteshb/archive ... bject.aspx This way only the account that encrypted it can decrypt it.