topic gMSA account in ONTAP Discussions

gMSA account

ToddBarton — Fri, 06 Sep 2024 14:20:14 GMT

Is it possible to login to a NetApp cluster (9.13) using a global Managed Service Account to run a powershell script?

Re: gMSA account

AlexDawson — Thu, 12 Sep 2024 07:43:45 GMT

If the system is configured for domain authentication and the account is part of a group that is authorised for the ONTAPI login method, it should work.

Re: gMSA account

ToddBarton — Mon, 16 Sep 2024 17:47:59 GMT

The system is configured for domain authentication and the account is part of a group authorized for ONTAPI login. I can't figure out how to run the Get- and Add-Credential to include both the Userid (gMSA account) and the password in my script to allow the connection to the NetApp cluster.

Re: gMSA account

Sanaman — Tue, 17 Sep 2024 03:41:14 GMT

You can use stored credentials for auto login, similar to

$credential = Get-Credential
$credential.password |ConvertFrom-SecureString |set-Content C:\Users\domain_user\encrypted_password.txt

$encrypted = Get-Content C:\Users\domain_user\encrypted_password.txt | ConvertTo-SecureString
$dom_user = "domain\domain_user"

$credential = New-Object System.Management.Automation.PsCredential($dom_user, $encrypted)

Then use that credential ($credential) to login to the cluster ($filer)

$ClusterConnection = Connect-NcController -name $filer -Credential $credential
# If the connection is not success, exit else continue.

if (!$ClusterConnection) {
Write-Host "Unable to connect to $filer, please ensure all supplied information is correct and try again"
Exit

} else

{ Continue with you script}

Hope that helps