Azure / Azure/AzureStack-Tools

LCM account now requires full control, but the pre deployment script does not grant it

Abierto
#710 0 comentarios 0 reacciones 0 asignados Ver en GitHub
Lenguaje dominante
PowerShell
Estrellas
260
Forks
283
Merge medio
2 h 11 min
PR fusionados (30 d)
1

Descripción

We just recently started an Azure Local deployment and during validation, the LCM creates the CNO, but fails to apply the permissions granting the CNO full control over the lcm account. This happens as part of this script: C:\NugetStore\Microsoft.AS.Infra.Security.Domain.10.2604.0.42\content\Deployment\Domain.psm1

Unfortunately, the LCM doesn't have full control over the OU to be able to grant it to the CNO. The predeployment script only grants the lcm limited permissions: https://github.com/Azure/AzureStack-Tools/blob/8fd59ad7bb82b4bf485a05073d16d416e01c8593/HCI/AsHciADArtifactsPreCreationTool.psm1#L614

I'd offer a pull request, but the Contribution guidelines link doesn't work. Also, pull requests seem pretty stale.

Guía de contribución

Abrir la guía de contribución

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.