Skip to content

[Regression] Fix for JEA user role in virtual account #11668

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jan 24, 2020
Merged

[Regression] Fix for JEA user role in virtual account #11668

merged 1 commit into from
Jan 24, 2020

Conversation

PaulHigin
Copy link
Contributor

@PaulHigin PaulHigin commented Jan 23, 2020

PR Summary

This is issue #11538.

JEA user role access was not being set correctly for a user in a JEA session endpoint configuration that is configured for RunAs or virtual accounts.

PR Context

The user role access was not being allowed for RunAs/virtual accounts because the endpoint configuration was setting the UseSharedProcess to True. In this case the WinRM host cannot provide a user token needed by PowerShell to assign role access.

This is a regression from PS6, due to workflow clean up effort (#9618). The Register-PSSessionConfiguration command would automatically set an endpoint configuration to UseSharedProcess to True for workflow endpoints. Code clean up typo left the code to always set UseSharedProcess to True for any endpoint configuration by default.

Simple fix is to remove the old workflow code completely so that UseShareProcess is False by default, and only enabled by user as it works in Windows PowerShell and PowerShell 6+.

PR Checklist

@ghost ghost assigned daxian-dbw Jan 23, 2020
@PaulHigin PaulHigin added this to the 7.0-Consider milestone Jan 23, 2020
@iSazonov
Copy link
Collaborator

I added reference to #9618 where we did workflow cleanup.

@iSazonov
Copy link
Collaborator

Have we any progress with adding remoting tests?
I hope MSFT team has such tests internally at least.

@daxian-dbw
Copy link
Member

This is a regression from PS6, due to workflow clean up effort (#9618).

Great finding. It's hard to track down the regression caused by subtle changes like this one.
@iSazonov there is on-going efforts to setup the cross-remoting test infrastructure, but even after the infrastructure is ready, there will still be some time before we have the desired coverage in remoting scenarios.

@daxian-dbw daxian-dbw merged commit a7a2b12 into PowerShell:master Jan 24, 2020
@PaulHigin PaulHigin deleted the fix-JEA-virtualaccount branch January 24, 2020 20:03
@daxian-dbw daxian-dbw modified the milestones: 7.0-Consider, GA-consider Jan 25, 2020
@daxian-dbw daxian-dbw added the CL-Engine Indicates that a PR should be marked as an engine change in the Change Log label Jan 25, 2020
@daxian-dbw daxian-dbw modified the milestones: GA-consider, GA-approved Jan 31, 2020
TravisEz13 pushed a commit that referenced this pull request Feb 8, 2020
@TravisEz13 TravisEz13 modified the milestones: GA-approved, 7.0.0 Feb 8, 2020
@ghost
Copy link

ghost commented Feb 21, 2020

🎉v7.0.0-rc.3 has been released which incorporates this pull request.:tada:

Handy links:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
CL-Engine Indicates that a PR should be marked as an engine change in the Change Log
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants