Examples/Resources/AdfsFarmNode/4-AdfsFarmNode_gMSA-SQL_Config.ps1
|
<#PSScriptInfo
.VERSION 1.0.0 .GUID 5aeebe71-68eb-49d1-8712-ebb78786758a .AUTHOR Microsoft Corporation .COMPANYNAME Microsoft Corporation .COPYRIGHT (c) Microsoft Corporation. All rights reserved. .TAGS DSCConfiguration .LICENSEURI https://github.com/X-Guardian/AdfsDsc/blob/master/LICENSE .PROJECTURI https://github.com/X-Guardian/AdfsDsc .ICONURI .EXTERNALMODULEDEPENDENCIES .REQUIREDSCRIPTS .EXTERNALSCRIPTDEPENDENCIES .RELEASENOTES First version. .PRIVATEDATA 2016-Datacenter,2016-Datacenter-Server-Core #> #Requires -module AdfsDsc <# .DESCRIPTION This configuration will add the computer as a node in an existing Active Directory Federation Services (AD FS) server farm using using a Microsoft SQL Server database on a remote computer named sql01.contoso.com using SQL Authentication and whose primary node is installed on a computer named adfs01.contoso.com. The certificate with the specified thumbprint will be used as the SSL certificate and the service communications certificate. Automatically generated, self-signed certificates will be used for the token signing and token decryption certificates. The group Managed Service Account specified in the GroupServiceAccountIdentifier parameter will be used for the service account. #> Configuration AdfsFarmNode_gMSA-SQL_Config { param ( [Parameter(Mandatory = $true)] [ValidateNotNullOrEmpty()] [System.Management.Automation.PSCredential] $DomainAdminCredential, [Parameter(Mandatory = $true)] [ValidateNotNullOrEmpty()] [System.Management.Automation.PSCredential] $SqlCredential ) Import-DscResource -ModuleName AdfsDsc Node localhost { WindowsFeature InstallAdfs { Name = 'ADFS-Federation' } $SqlUserName = $SqlCredential.UserName $SqlPassword = $SqlCredential.GetNetworkCredential().Password AdfsFarmNode SecondWIDHost { FederationServiceName = 'sts.contoso.com' CertificateThumbprint = '933D8ACDD49CEF529EB159504C4095575E3496BB' GroupServiceAccountIdentifier = 'contoso\adfsgmsa$' SQLConnectionString = "Data Source=sql01.contoso.com;User ID=$SqlUserName;Password=$SqlPassword" Credential = $DomainAdminCredential PrimaryComputerName = 'adfs01.contoso.com' } } } |