Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

WARNING: It is not recommended to use domain credential for node #417

Closed
patel1684 opened this issue Sep 14, 2022 · 4 comments
Closed

WARNING: It is not recommended to use domain credential for node #417

patel1684 opened this issue Sep 14, 2022 · 4 comments
Labels
Fixed Label for when an issue is fixed.

Comments

@patel1684
Copy link

WARNING: It is not recommended to use domain credential for node '********.onmicrosoft.com'. In order to suppress the warning, you can add a property named 'PSDscAllowDomainUser' with a value of $true to your DSC configuration data for node '**********.onmicrosoft.com'.

@shailesh91
Copy link
Contributor

@patel1684 can you please provide more context for this issue. Thanks.

@patel1684
Copy link
Author

"ConfigData":{
"Version":"10.9.1",
"ServerContext":"hosting",
"PortalContext":"portal",
"ServerRole":"GeneralPurposeServer",
"Credentials":{
"ServiceAccount":{
"Password":"*************",
"UserName":"svc-arcgis-test",
"IsDomainAccount":true,
"IsMSAAccount":false
}
},

While using above configuration it create windows local account is it by script design or error in my configuration file?
While using either of these it's throw an warning
xxxxxx.xxxxxxx.onmicrosoft.com\svc-arcgis-test
svc-arcgis-test@xxxxxxx.xxxxxxxx.onmicrosoft.com

WARNING: It is not recommended to use domain credential for node 'Server-test.xxxxxx.xxxxxxxx.onmicrosoft.com'. In order to suppress the warning, you can add a property named 'PSDscAllowDomainUser' with a value of $true to your DSC configuration data for node 'Server-test.xxxxxx.xxxxxxxx.onmicrosoft.com'.

@widsuoids
Copy link

https://learn.microsoft.com/en-us/powershell/dsc/configurations/configdatacredentials?view=dsc-1.1#domain-credentials

(...) generates the warning that using a domain account for a credential is not recommended. Using a local account eliminates potential exposure of domain credentials that could be used on other servers.

When using credentials with DSC resources, prefer a local account over a domain account when possible.
If there is a '' or '@' in the Username property of the credential, then DSC will treat it as a domain account. There is an exception for "localhost", "127.0.0.1", and "::1" in the domain portion of the user name.

@cameronkroeker
Copy link
Contributor

This issue has been addressed in release v4.2.0:
https://github.com/Esri/arcgis-powershell-dsc/releases/tag/v4.2.0

@cameronkroeker cameronkroeker added the Fixed Label for when an issue is fixed. label Nov 16, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Fixed Label for when an issue is fixed.
Projects
None yet
Development

No branches or pull requests

4 participants