You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In windows the root equivalent user is SYSTEM, often we use the Builtin\Administrator account as a good alternative, because SYSTEM has at least the same right as Administrator
But ... I said often, and when you promote your server as a Domain Controller you loose the "Local Accounts" distinction, and SYSTEM starts to behave differently than Administrator!
Meaning that, if you promote your server as a Domain Controller, and chef is running as SYSTEM, currently you have big trouble to touch the client.rb file (via the config recipe for instance) because it's own by Administrator.
There is an helper to determine the root_owner but it's use an hardcoded SID + limit the query to LocalAccount which aren't there anymore :)
I know that new attributes are not accepted on this cookbook so ... I'll not create a PR adding a new node['chef_client']['root_user'] attribute allowing me to use SYSTEM and not Administrator as root_owner.
Therefore, do you have any other solution?
Regards!
The text was updated successfully, but these errors were encountered:
Hello,
In windows the root equivalent user is
SYSTEM
, often we use theBuiltin\Administrator
account as a good alternative, becauseSYSTEM
has at least the same right asAdministrator
But ... I said often, and when you promote your server as a Domain Controller you loose the "Local Accounts" distinction, and
SYSTEM
starts to behave differently thanAdministrator
!Meaning that, if you promote your server as a Domain Controller, and chef is running as
SYSTEM
, currently you have big trouble to touch theclient.rb
file (via the config recipe for instance) because it's own byAdministrator
.There is an helper to determine the root_owner but it's use an hardcoded SID + limit the query to
LocalAccount
which aren't there anymore :)I know that new attributes are not accepted on this cookbook so ... I'll not create a PR adding a new
node['chef_client']['root_user']
attribute allowing me to useSYSTEM
and notAdministrator
as root_owner.Therefore, do you have any other solution?
Regards!
The text was updated successfully, but these errors were encountered: