I have setup an IIS inside a container and I can use the host's IIS to connect to that "server".
Next step, I need to host a web application inside (I have successfully done it if the web is not related to AD)
The case is, our web applications need to be authenicated using our ad accounts and now, if I start the web inside the container, even I type the correct account + pw, it still gives me
401 - Unauthorized: Access is denied due to invalid credentials.
So... how to use AD inside a container?
I have came across gMSA
I logged in to the AD server and run:
New-ADServiceAccount -Name ABC -PrincipalsAllowedToRetrieveManagedPassword ABC-Servers –DNSHostName ABC.domain.com
I went to the server with Docker installed and run:
Import-Module ./CredentialSpec.psm1 New-CredentialSpec -Name ABC -AccountName ABC
start a new container with
But in the end, it still requires me to authenticate my-self and no matter what I typed, all 401...
btw, nltest /parentdomain shows me the ad server name