You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Problem: The db_service has no equivalent of the publish_crl_interval setting that exists in windows_desktop_service, requiring manual CRL republishing when Teleport's database CA is rotated.
Requested behaviour: Add a publish_crl_interval option (or equivalent automatic mechanism) to the Database Service so that the CRL for the DB client CA is kept up to date in Active Directory automatically, consistent with how Desktop Access already handles this.
Current workaround: Either a scheduled task to periodically run tctl auth crl --type=db_client and republish via certutil -dspublish, or disabling revocation checks entirely via registry key.
db/sqlserverMicrosoft SQL Server related database access issuesc-macInternal Customer Reference
1 participant
Heading
Bold
Italic
Quote
Code
Link
Numbered list
Unordered list
Task list
Attach files
Mention
Reference
Menu
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
-
Problem: The db_service has no equivalent of the publish_crl_interval setting that exists in windows_desktop_service, requiring manual CRL republishing when Teleport's database CA is rotated.
Requested behaviour: Add a publish_crl_interval option (or equivalent automatic mechanism) to the Database Service so that the CRL for the DB client CA is kept up to date in Active Directory automatically, consistent with how Desktop Access already handles this.
Current workaround: Either a scheduled task to periodically run tctl auth crl --type=db_client and republish via certutil -dspublish, or disabling revocation checks entirely via registry key.
Based on the request (zendesk ticket 17778)
Beta Was this translation helpful? Give feedback.
All reactions