microsoft / microsoft/CSS-Exchange
[Feature Request] kerberos related health checks
@dpaulson45 is already working on this.
Since Dec 6, 2024.
- Dominant language
- PowerShell
- Stars
- 1.3k
- Forks
- 395
- Avg merge
- 14h 7m
- Merged PRs (30d)
- 5
Description
Is your request related to a problem? Please describe.
A clear and concise description of what the problem is and the results it had on the environment.
kerberos and its related configuration requirements are increasingly relevant and i dont think the current healthchecker script is yet looking for possible configuration issues
- missing ASA account
- missing or inconsistent SPN configurations
- ASA account password still valid
- exchange service level configuration settings related to auth methods
- ASA account msDS-SupportedEncryptionTypes value
Describe The Request
A clear and concise description of the feature to add to a current tool or a new tool with what we all want to be checking with examples.
Get-ClientAccessServer CAS-3 -IncludeAlternateServiceAccountCredentialStatus | Format-List Name, AlternateServiceAccountConfiguration
Additional context
Add any other context or screenshots about the feature request here.
the following article describes several setup and verification steps
https://learn.microsoft.com/en-us/exchange/architecture/client-access/kerberos-auth-for-load-balanced-client-access?view=exchserver-2019
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.