1. Floyd Edwards
  2. PowerBuilder
  3. Friday, 30 October 2020 16:20 PM UTC

We have some legacy processing applications (not dot net) with PowerBuilder 2017 R3

 

We use an SQL login and password to log into the database now. Our operations people would like to get away from this type of login and move to a more secure GMSA account.

 

Has anyone tried using a GMSA as the login for a PB application (with exe and pbd's) before?

 

Trying to google search, but not finding much

John Fauss Accepted Answer Pending Moderation
  1. Friday, 30 October 2020 18:08 PM UTC
  2. PowerBuilder
  3. # 1

Hi, Floyd -

I've already looked it up, but it might be helpful if you would please explain what GMSA is and it might also be helpful to know what RDBMS your applications are using.

Regards, John

Comment
  1. Miguel Leeuwe
  2. Monday, 2 November 2020 17:16 PM UTC
gMSA (Group Managed Service Accounts) come along with the introduction of Server 2012, these aim to increase the security of service accounts by removing static & known passwords. However, they do introduce their own complications.
  1. Helpful
  1. Floyd Edwards
  2. Monday, 2 November 2020 19:11 PM UTC
but how do you get a gMSA to work with PowerBuilder? I know how to set it up on an MS SQL server.
  1. Helpful
  1. Floyd Edwards
  2. Monday, 2 November 2020 19:12 PM UTC
That should say within a PowerBuilder application
  1. Helpful
There are no comments made yet.
Kevin Ridley Accepted Answer Pending Moderation
  1. Friday, 30 October 2020 18:27 PM UTC
  2. PowerBuilder
  3. # 2

Why not Active Directory?  I've got some code that uses the ADVAPI32.DLL that I could post.

Comment
  1. Floyd Edwards
  2. Monday, 2 November 2020 15:46 PM UTC
That would be good for some of our users, but we also have users from outside our office that is not part of active directory.



Are you using the Dot Net PowerBuilder or the Classic PB with your code?
  1. Helpful
  1. Floyd Edwards
  2. Monday, 2 November 2020 15:47 PM UTC
I should also mention that the users outside of our office will never be able to part of our active directory (State Agency).
  1. Helpful
There are no comments made yet.
Andreas Mykonios Accepted Answer Pending Moderation
  1. Monday, 2 November 2020 16:09 PM UTC
  2. PowerBuilder
  3. # 3

Hi.

Is GMSA Grouped Managed Service Accounts? I thougt those accounts were used for services...

Andreas.

Comment
  1. Floyd Edwards
  2. Monday, 2 November 2020 16:29 PM UTC
We have an application that processes data that comes from an external source.

Currently it is using a regular SQL login to connect to the BD.



We want to convert that to a gMSA account for security reasons but maybe a Active Directory would be better.
  1. Helpful
There are no comments made yet.
  • Page :
  • 1


There are no replies made for this question yet.
However, you are not allowed to reply to this question.