DPA - Use gMSA for database monitoring and repos.properties

heatherh

I am able to get the ignite service to run with a gMSA account, but when I try to map a database with the gMSA account, I get the following error.

Exception thrown executing [AnnotatedAction@2b702ce8 targetAction = [RepointMonDbAction@f27dda6 formObjectName = 'idcFormData', formObjectClass = RepointMonDbData, formObjectScope = FLOW], attributes = map['method' -> 'validateConnectionInfo']] in state 'validateConnectionInfo' of flow 'repoint-mondb-flow' -- action execution attributes were 'map[[empty]]'

I also need to know how to set the repo.properties repo.user to the gMSA account.

If gMSA is not possible for either scenario, can a normal AD account be used?

HerrDoktor

Copied from https://documentation.solarwinds.com/en/success_center/dpa/content/dpa-register-a-sql-server-database.htm

Prerequisites for authenticating with a gMSA

The DPA monitoring user can log in to DPA with a group managed service account (gMSA) if the following conditions are met:

• DPA must be installed on a server with a Windows operating system.

• All SQL Server instances that use a gMSA to authenticate the monitoring user must use the same gMSA login and they must be monitored by the same DPA server.

• DPA and SQL Server must run under the same AD domain controller (workgroup) and must be configured to access this gMSA.

• You must download the mssql-jdbc_auth-12.2.0.x64.dll file and install it in the Java library path on the DPA server. This file is not shipped with DPA.

  To find the Java installation directory, open the java_loc.txt file in a text editor. The default location for this file is:

  C:\Program Files\SolarWinds\DPA\iwc\tomcat\ignite_config\java_loc.txt

  The java_loc.txt file contains the location of DPA’s Java installation. For example: 

  C:\Program Files\SolarWinds\DPA\iwc\jre\bin\java.exe

• The DPA service must have access to access the DPA folder for the gMSA.