go-sqlcmd icon indicating copy to clipboard operation
go-sqlcmd copied to clipboard
verified publisher icon microsoft

ADS Login Fails if a container is deleted and a new one is created

Open dlevy-msft opened this issue 2 years ago • 2 comments

The credentials stored for a sql container are being persisted in ADS and not overwritten when a new container is created. This causes a login failure in ADS and forces a reset of the password, putting the context in SQLCMD out of synch with the creds in the SQL container.

There are 2 things that probably need to happen here:

  1. ADS creds for a container need to be deleted when a container is deleted.
  2. SQLCMD needs a mechanism to change a user password to avoid out of synch contexts - this should probably update ADS creds too.

dlevy-msft avatar Jul 21 '23 16:07 dlevy-msft

We need to be extremely careful about modifying Azure Data Studio's settings file. It's not a documented format and there's no API. On Windows, it's possible to update the password in the credential manager if the lookup key for the new container is the same as the old one.

shueybubbles avatar Jul 21 '23 16:07 shueybubbles

I debugged this, and have a fix (fix can currently be tested in #319, will factor it out of there into a separate PR)

stuartpa avatar Jan 11 '24 13:01 stuartpa