O que aconteceu com a conta do Cluster Service no Windows Server 2008 ?

Publicado: 15/12/2009 em Windows Server
Tags:,
Para quem está familiarizado com as versões anteriores Windows Server 2003 e Windows 2000 Server, ao iniciar a configuração do Feature Failover Cluster no Windows Server 2008 terá algumas surpresas, como por exemplo a conta do Cluster – CSA – Cluster Service Account, que deixou de ser necessária.
 
Abaixo segue o tópico publicado no Microsoft’s Failover and Network Load Balancing Clustering Team Blog:
 
 

What happened to the Cluster Service Account?

 

Before Windows Server 2008, the cluster required the use of a Cluster Service Account (CSA).  This was a domain user under whose credentials the cluster service, as well as cluster resources, ran.  The CSA presented some problems, the most obvious of which was requiring administrators to rotate this password every so often.

In Windows Server 2008, we removed this requirement.  To replace the CSA, we created the Cluster Name Object (CNO).  This is a Network Name resource that acts as the identity of the Cluster.  This CNO in turn owns all of the Virtual Computer Objects (VCO) in the cluster.  The VCOs are the computer names to which clients connect.  The cluster service and cluster resources, now impersonate the CNO or the proper VCO.

To give an example, suppose you created a cluster named "SQLCLUSTER01" and this cluster hosts two applications, named "CORPSQL01" and "CORPDOCS."  Active Directory will contain three computer objects – SQLCLUSTER01, CORPSQL01, and CORPDOCS.  SQLCLUSTER01 be the owner of CORPSQL01 and CORPDOCS.

Taking this example one step further, suppose that this cluster is configured to have a File Share Witness.  To which identity would you need to grant permissions on the file share used as this witness?

For more information about Active Directory with Failover Clustering, check out our TechNet guide on Configuring Accounts for Active Directory:   http://technet.microsoft.com/en-us/library/cc731002.aspx.

Thanks,
Matt Kurjanowicz
Software Development Engineer
Clustering & High Availability

Fonte: http://blogs.msdn.com/clustering/archive/2008/08/19/8877483.aspx

Deixe uma resposta

Preencha os seus dados abaixo ou clique em um ícone para log in:

Logotipo do WordPress.com

Você está comentando utilizando sua conta WordPress.com. Sair / Alterar )

Imagem do Twitter

Você está comentando utilizando sua conta Twitter. Sair / Alterar )

Foto do Facebook

Você está comentando utilizando sua conta Facebook. Sair / Alterar )

Foto do Google+

Você está comentando utilizando sua conta Google+. Sair / Alterar )

Conectando a %s