Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

gMSA credential spec not registering in containers #274

Open
Heneman opened this issue Oct 10, 2019 · 0 comments
Open

gMSA credential spec not registering in containers #274

Heneman opened this issue Oct 10, 2019 · 0 comments

Comments

@Heneman
Copy link

Heneman commented Oct 10, 2019

I've got a gMSA credential spec that I've been using to transfer log files to shares on our network that I can make work if I manually create a node in Node Manager and then manually spin up a detached container with the --security-opt 'credentialspec=file://domain_gmsa-group.json' flag, however the file transfers do not work when used as a value for the Docker Command argument under Create Container Settings.

I've got a pipeline set up where the first commands are:

powershell('nltest /sc_verify:domain.com')
powerhsell('klist get krbtgt')

and the first fails with:

13:31:23  powershell.exe : nltest : I_NetLogonControl failed: Status = 1722 0x6ba RPC_S_SERVER_UNAVAILABLE

The Test Connection output:

com.github.kostyasha.yad_docker_java.com.github.dockerjava.api.model.Version@1500181[
  apiVersion=1.40
  arch=amd64
  gitCommit=c92ab06ed9
  goVersion=go1.12.8
  kernelVersion=10.0 17763 (17763.1.amd64fre.rs5_release.180914-1434)
  operatingSystem=windows
  version=19.03.2
  buildTime=09/03/2019 16:35:47
  experimental=<null>
  minAPIVersion=1.24
  platform=com.github.kostyasha.yad_docker_java.com.github.dockerjava.api.model.VersionPlatform@ae1485[name=Docker Engine - Enterprise]
  components=[com.github.kostyasha.yad_docker_java.com.github.dockerjava.api.model.VersionComponent@11e82ba[details={ApiVersion=1.40, Arch=amd64, BuildTime=09/03/2019 16:35:47, Experimental=false, GitCommit=c92ab06ed9, GoVersion=go1.12.8, KernelVersion=10.0 17763 (17763.1.amd64fre.rs5_release.180914-1434), MinAPIVersion=1.24, Os=windows},name=Engine,version=19.03.2]]
]

The Docker Command:
docker run -d --security-opt 'credentialspec=file://domain_gmsa-group.json'

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant