ONTAP Hardware

ONTAP PowerShell Toolkit Pass-through Authentication

ScottMiller
Is pass-through authentication on the road map for the ONTAP PowerShell Toolkit? Is it already available and I just don't realize it? Background: I want to use a AD service account to pull quota-related data from a cluster using PowerShell. I cannot store the credentials.
1 REPLY 1

GidonMarcus

Hi

 

it's not exists. it used to work on 7-mode thanks to the RPC services and computer account the filer had, in Cdot the computer account is of the SVM and RPC only availble on the SVM itself. not on the cluster/node so they cannot authenticate in the same way.

 

See BURT

https://mysupport.netapp.com/NOW/cgi-bin/bol?Type=Detail&Display=826138

 

if you store the cred using PS secure cred to a XML/json/txt. only the user who encrypted the cred can read it, so if you using the same user that you let's say run a sched task with (if you trust that it is safe),  you are not really exposing "new" risk by leaving this file behind (as whoever manages to exploit it - need anyway to have access to the user)

Gidi Marcus (Linkedin) - Storage and Microsoft technologies consultant - Hydro IT LTD - UK
Announcements
Register for Insight 2021 Digital

INSIGHT 2021 Digital: Meet the Specialists 2

On October 20-22, gear up for a fully digital, totally immersive virtual experience with a downright legendary lineup of world-renowned specialists. Tune in for visionary conversations, solution deep dives, technical sessions and more.

NetApp on Discord Image

We're on Discord, are you?

Live Chat, Watch Parties, and More!

Explore Banner

Meet Explore, NetApp’s digital sales platform

Engage digitally throughout the sales process, from product discovery to configuration, and handle all your post-purchase needs.

NetApp Insights to Action
I2A Banner
Public