Central Management - Add Support For LDAP Authentication Setup Via gMSA

chocolatey / chocolatey-licensed-issues

Issues for Licensed Editions of Chocolatey

19 stars 13 forks source link

Central Management - Add Support For LDAP Authentication Setup Via gMSA #290

Open ryanrichter94 opened 2 years ago

ryanrichter94 commented 2 years ago

Request

Currently CCM LDAP authentication cannot be setup using a group managed service account(gMSA) because a password needs to be defined when configuring LDAP authentication. With modern gMSAs the password for the account is only know by the LDAP system and local machine's operating system.

Microsoft documentation for a gMSA.

References

ZenDesk Ticket

┆Issue is synchronized with this Gitlab issue by Unito

0xjosim commented 4 months ago

This would be a great addition to CCM and would improve security and ease of use significantly IMO.