Skip to content

Commit

Permalink
clarify second hop issue in docs (#12)
Browse files Browse the repository at this point in the history
  • Loading branch information
sjurtf authored Apr 12, 2023
1 parent 6279472 commit 8189265
Show file tree
Hide file tree
Showing 2 changed files with 12 additions and 13 deletions.
12 changes: 6 additions & 6 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -14,14 +14,14 @@ Other Terraform providers have implemented similar functionality, but they eithe
running PowerShell or utilize WinRM to execute PowerShell remotely. In many environments, this is not preferable or
possible.

The PowerShell module, which this and other providers rely on
[DnsService](https://learn.microsoft.com/en-us/powershell/module/dnsserver/?view=windowsserver2022-ps)
is using WinRM internally as the transport when talking to the DNS Server.
This, and other similar providers are configuring Windows DNS servers using the PowerShell module
[DnsService](https://learn.microsoft.com/en-us/powershell/module/dnsserver/?view=windowsserver2022-ps).
This module uses WinRM internally when talking to the DNS Server.

In an environment where the DNS server is running on a locked down Domain Controller with WinRM is disabled, one will thus
run into problems with second hop WinRM. We have not been able to find a solution to making the second hop securely and easily.
In an environment where the DNS server is running on a locked-down Domain Controller with WinRM disabled, one will thus
run into problems with the second hop WinRM when going through a jump host. We have yet to find a solution to making the second WinRM hop secure and easily.

This provider avoids the whole second hop problem by using SSH as the transport for the first hop when running PowerShell.
This provider avoids the whole second hop concern by using SSH as the transport for the first hop when running PowerShell.


## Getting started
Expand Down
13 changes: 6 additions & 7 deletions docs/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -22,15 +22,14 @@ Other Terraform providers have implemented similar functionality, but they eithe
running PowerShell or utilize WinRM to execute PowerShell remotely. In many environments, this is not preferable or
possible.

The PowerShell module, which this and other providers rely on
[DnsService](https://learn.microsoft.com/en-us/powershell/module/dnsserver/?view=windowsserver2022-ps)
is using WinRM internally as the transport when talking to the DNS Server.
This, and other similar providers are configuring Windows DNS servers using the PowerShell module
[DnsService](https://learn.microsoft.com/en-us/powershell/module/dnsserver/?view=windowsserver2022-ps).
This module uses WinRM internally when talking to the DNS Server.

In an environment where the DNS server is running on a locked down Domain Controller with WinRM is disabled, one will thus
run into problems with second hop WinRM. We have not been able to find a solution to making the second hop securely and easily.

This provider avoids the whole second hop problem by using SSH as the transport for the first hop when running PowerShell.
In an environment where the DNS server is running on a locked-down Domain Controller with WinRM disabled, one will thus
run into problems with the second hop WinRM when going through a jump host. We have yet to find a solution to making the second WinRM hop secure and easily.

This provider avoids the whole second hop concern by using SSH as the transport for the first hop when running PowerShell.

<!-- schema generated by tfplugindocs -->
## Schema
Expand Down

0 comments on commit 8189265

Please sign in to comment.