Question

我有一个本地Service Fabric群集，其安全性配置如下：

"security": {
  "ServerCredentialType": "Windows",
  "WindowsIdentities": {
    "ClustergMSAIdentity": "ServiceFabric@mydomain.com",
    "ClusterSPN": "ServiceFabric/ServiceFabric.mydomain.com",
    "ClientIdentities": [
      {
        "Identity": "mydomain\\admin1",
        "IsAdmin": true
      }
    ]
  }
},

我已经验证了

我可以使用运行群集的同一台计算机上的Connect-ServiceFabricCluster成功连接到此群集
我可以从域外的计算机成功连接到Service Fabric Explorer（浏览器正确地提示我输入我的Windows凭据）
如果我删除"ServerCredentialType": "Windows",并重建群集，我可以从域外的计算机成功连接

但是，我无法弄清楚如何Connect-ServiceFabricCluster在域外使用Windows身份验证。我试过了

Connect-ServiceFabricCluster -ConnectionEndpoint 'cluster.mydomain.com:19000' -WindowsCredential

但结果是

WARNING: Failed to contact Naming Service. Attempting to contact Failover Manager Service...
WARNING: Failed to contact Failover Manager Service, Attempting to contact FMM...
False
Connect-ServiceFabricCluster : Could not ping any of the provided Service Fabric gateway endpoints.
At line:1 char:1
+ Connect-ServiceFabricCluster -ConnectionEndpoint 'cluster.mydomain.c ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidOperation: (:) [Connect-ServiceFabricCluster], FabricTransientException
    + FullyQualifiedErrorId : TestClusterConnectionErrorId,Microsoft.ServiceFabric.Powershell.ConnectCluster

我从未被提示输入我的凭据。有没有办法将我的Windows凭据传递到Connect-ServiceFabricCluster？我无法在the documentation for connecting securely中找到它。

Answer 1

请尝试

WindowsCredential = $ True

此处有更多信息https://docs.microsoft.com/en-us/powershell/module/servicefabric/connect-servicefabriccluster?view=azureservicefabricps

如何从域外的计算机连接到Windows安全的Service Fabric群集？

1 个答案: