AD, gMSA and SQL Server Windows Authentication in a Container Michał Poręba DBA at a SaaS company Twitter: @michalinwales Blog: https://dbain.wales

What do we have? Micro services written in .net core Hosted in IIS And data in SQL Server 2017

What do we want? The same micro services Hosted in docker containers (Because everything now is in containers)

Here is the deal SQL Server is fine as it is No Linux (so no Kubernetes) We want to keep Windows Authentication

Just one problem It doesn’t work! The containers are not joined to the domain!

Just one problem It doesn’t work! There are gMSA There are credential-spec files

And just one problem It doesn’t work! There are gMSA There are credential-spec files But everybody tells me!

The test setup: Lab on Azure VMs SQLGMSA domain WebAPI service in a container (michalporeba/sqlgmsatest:1809nano) https://aurlthing:8001/api/query/DB.sqlgmsa.local/TestDB Port SQL Server Instance DB Name

The test setup: A simple query executed with integrated security

See demo download