Vendors have bad practices
Posted by Gryyphyn@reddit | sysadmin | View on Reddit | 33 comments
Vendors suck. Why does anyone let vendors build solutions in our environments with bad practices like using named users instead of service accounts for databases?
I have a database that runs under a named user account that was built by a vendor and the named account belongs to a person who's no longer there. So of course we've already terminated the user and they're no longer in AD. If I try to create a new user with the same username of course the SID doesn't match so it can't authenticate to the database to do any owner operations or assign a new db_owner. Of course because we let the vendor manage their stuff in our network they didn't add my team as db_owner I can't do anything in the DB and they've lost the default DB creds which they never provided to us in the first place.
If anybody has any ideas how I can get past this problem without having to rebuild the database for an existing production solution I would be eternally grateful.
And if you work for a vendor: I'm not mad at you but push back against crap practices like this. If you manage a solution for your clients, in their network or yours, it's your responsibility to maintain appropriate access to data and resources. That means making sure you don't delete the only account which has access to those resources. Same goes for everyone, of course.
33 Comments
Chance-Brilliant-964@reddit
YumWoonSen@reddit
sirbzb@reddit
AppIdentityGuy@reddit
ozarkpagan@reddit
davidgoering@reddit
disclosure5@reddit
RestinRIP1990@reddit
fp4@reddit
Mr-RS182@reddit
Gryyphyn@reddit (OP)
Teximus_Prime@reddit
Nearby-Row1851@reddit
MNmetalhead@reddit
Gryyphyn@reddit (OP)
MNmetalhead@reddit
ValidDuck@reddit
Gryyphyn@reddit (OP)
ValidDuck@reddit
Gryyphyn@reddit (OP)
fieroloki@reddit
TheBestHawksFan@reddit
ISeeTheFnords@reddit
TheBestHawksFan@reddit
Gryyphyn@reddit (OP)
fieroloki@reddit
253IsHome@reddit
Gryyphyn@reddit (OP)
253IsHome@reddit
DodgeCharger6@reddit
Gryyphyn@reddit (OP)
DodgeCharger6@reddit
Gryyphyn@reddit (OP)