Azure-Samples / Azure-Samples/azure-files-samples

Clarify use of Update-AzStorageAccountADObjectPassword

Open
#66 0 comments 1 reaction 0 assignees View on GitHub
Dominant language
PowerShell
Stars
261
Forks
202
Avg merge
1d 5h
Merged PRs (30d)
4

Description

Just to be clear on the intended use of this command, you're always supposed to run it twice? The instructions on Microsoft Docs (https://docs.microsoft.com/en-us/azure/storage/files/storage-files-identity-ad-ds-update-password) seem to indicate that you just need to run the command once. However, the comment block for the command seems to indicate that you're actually supposed to rotate from kerb1 to kerb2 then back to kerb1 within the span of a "several" hours. Presumably this is achieved by running the command twice.

E.g.
```
Update-AzStorageAccountADObjectPassword -RotateToKerbKey kerb2 -ResourceGroupName "" -StorageAccountName ""
Start-Sleep -Seconds 14400
Update-AzStorageAccountADObjectPassword -RotateToKerbKey kerb1 -ResourceGroupName "" -StorageAccountName ""
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.