{"id":5645,"date":"2018-09-18T13:24:26","date_gmt":"2018-09-18T19:24:26","guid":{"rendered":"https:\/\/kevinjustin.com\/blog\/?p=5645"},"modified":"2018-09-18T13:24:26","modified_gmt":"2018-09-18T19:24:26","slug":"workflow-manager-addendum-mp-for-sql-aliases","status":"publish","type":"post","link":"https:\/\/kevinjustin.com\/blog\/2018\/09\/18\/workflow-manager-addendum-mp-for-sql-aliases\/","title":{"rendered":"Workflow Manager Addendum MP for SQL Aliases"},"content":{"rendered":"

\"\"<\/p>\n

 <\/p>\n

A SQL Alias is kinda like wearing disguise glasses…<\/p>\n

 <\/p>\n

From a security perspective, you can make things difficult for attackers by specifying a SQL\u00a0alias and different port for SQL.<\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

Symptom – discovery fails for WFM pack<\/h2>\n

 <\/p>\n

Trying to monitor and figure out what the real database name, instance, etc. can be a challenge.<\/p>\n

A couple of years ago, I was able to find an example for one customer where the registry key shed light on the alias.<\/p>\n

 <\/p>\n

The workflow manager management pack has a DataSourceModuleType “Microsoft.WorkflowManager.Addendum.v1.WFCommandExecuterDataSource”, where this change successfully retrieved the sql server name.<\/p>\n

This datasource uses the\u00a0PowerShell script (WorkflowPSDiscovery.ps1<\/span>)<\/p>\n

 <\/p>\n

This function was changed in one example<\/strong><\/p>\n

# Get computer name from splitted dataSource
\nfunction GetPrincipalName {<\/span>
\nparam(<\/span>
\n$ADDomain,<\/span>
\n$ss<\/span>
\n)<\/span><\/p>\n

#$ssWithoutPort = $ss[0].split(‘,’)<\/span>
\n#if (-not $ssWithoutPort[0].Contains(‘.’))<\/span>
\n#{<\/span>
\n#\u00a0$ssWithoutPort[0] = $ssWithoutPort[0] + “.” + $ADDomain.Name<\/span>
\n#}<\/span>
\n#$principalName = $ssWithoutPort[0]<\/span><\/p>\n

$key = ‘HKLM:\\SOFTWARE\\Microsoft\\MSSQLServer\\Client\\ConnectTo’<\/span>
\n$sqlfromalias = (Get-ItemProperty -Path $key -Name $ss).$ss<\/span>
\n$sqlserverstr = $sqlfromalias.Split(‘,’)<\/span>
\n$sqlserver = $sqlserverstr[1]<\/span>
\n$principalName = $sqlserver<\/span><\/p>\n

return $principalName<\/span>
\n}<\/span><\/p>\n

 <\/p>\n

 <\/p>\n

Ran into this discovery issue a second time, and the function didn’t solve the failure.<\/p>\n

Real quick<\/strong> – a shout out and my\u00a0thanks to Chuck Hughes and Mike Sadoff, for their time and testing this more\u00a0robust discovery method.<\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

Added logic to fix the assumed InstanceName ($instname) – Most likely why my first function worked (configuration had default SQL\u00a0instance name of MSSQLSERVER )<\/p>\n

Added GetSqlAlias function to help decode the disguise<\/p>\n

 <\/p>\n

 <\/p>\n

Gallery download here<\/a><\/p>\n

 <\/p>\n

Don’t forget to override the original workflow manager discovery!<\/p>\n

Microsoft.WorkflowManager.v1.Addendum.WFPSDiscovery<\/p>\n","protected":false},"excerpt":{"rendered":"

  A SQL Alias is kinda like wearing disguise glasses…   From a security perspective, you can make things difficult for attackers by specifying a SQL\u00a0alias and different port for SQL.       Symptom – discovery fails for WFM pack   Trying to monitor and figure out what the real database name, instance, etc. … Continue reading “Workflow Manager Addendum MP for SQL Aliases”<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2,7,11],"tags":[25,28,35,36,52,116,342,388,410,411,481,491,492],"class_list":["post-5645","post","type-post","status-publish","format-standard","hentry","category-administration","category-mp-management-pack","category-troubleshooting","tag-addendum","tag-administration","tag-alias","tag-analysis","tag-authoring","tag-datasourcemodule-workflowpsdiscovery-ps1","tag-scom","tag-sharepoint","tag-sql","tag-sql-alias","tag-wfm","tag-workflow","tag-workflow-manager"],"yoast_head":"\nWorkflow Manager Addendum MP for SQL Aliases - Kevin Justin's Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/kevinjustin.com\/blog\/2018\/09\/18\/workflow-manager-addendum-mp-for-sql-aliases\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Workflow Manager Addendum MP for SQL Aliases - Kevin Justin's Blog\" \/>\n<meta property=\"og:description\" content=\"  A SQL Alias is kinda like wearing disguise glasses…   From a security perspective, you can make things difficult for attackers by specifying a SQL\u00a0alias and different port for SQL.       Symptom – discovery fails for WFM pack   Trying to monitor and figure out what the real database name, instance, etc. … Continue reading "Workflow Manager Addendum MP for SQL Aliases"\" \/>\n<meta property=\"og:url\" content=\"https:\/\/kevinjustin.com\/blog\/2018\/09\/18\/workflow-manager-addendum-mp-for-sql-aliases\/\" \/>\n<meta property=\"og:site_name\" content=\"Kevin Justin's Blog\" \/>\n<meta property=\"article:published_time\" content=\"2018-09-18T19:24:26+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2018\/09\/disguise-glasses.jpg\" \/>\n<meta name=\"author\" content=\"Kevin Justin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Kevin Justin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2018\\\/09\\\/18\\\/workflow-manager-addendum-mp-for-sql-aliases\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2018\\\/09\\\/18\\\/workflow-manager-addendum-mp-for-sql-aliases\\\/\"},\"author\":{\"name\":\"Kevin Justin\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/213cdc5c6c3f2a1d9e8417c07440972d\"},\"headline\":\"Workflow Manager Addendum MP for SQL Aliases\",\"datePublished\":\"2018-09-18T19:24:26+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2018\\\/09\\\/18\\\/workflow-manager-addendum-mp-for-sql-aliases\\\/\"},\"wordCount\":276,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2018\\\/09\\\/18\\\/workflow-manager-addendum-mp-for-sql-aliases\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/09\\\/disguise-glasses.jpg\",\"keywords\":[\"addendum\",\"Administration\",\"alias\",\"analysis\",\"Authoring\",\"datasourcemodule WorkflowPSDiscovery.ps1\",\"SCOM\",\"sharepoint\",\"sql\",\"sql alias\",\"wfm\",\"workflow\",\"workflow manager\"],\"articleSection\":[\"Administration\",\"MP Management Pack\",\"Troubleshooting\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2018\\\/09\\\/18\\\/workflow-manager-addendum-mp-for-sql-aliases\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2018\\\/09\\\/18\\\/workflow-manager-addendum-mp-for-sql-aliases\\\/\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2018\\\/09\\\/18\\\/workflow-manager-addendum-mp-for-sql-aliases\\\/\",\"name\":\"Workflow Manager Addendum MP for SQL Aliases - Kevin Justin's Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2018\\\/09\\\/18\\\/workflow-manager-addendum-mp-for-sql-aliases\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2018\\\/09\\\/18\\\/workflow-manager-addendum-mp-for-sql-aliases\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/09\\\/disguise-glasses.jpg\",\"datePublished\":\"2018-09-18T19:24:26+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/213cdc5c6c3f2a1d9e8417c07440972d\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2018\\\/09\\\/18\\\/workflow-manager-addendum-mp-for-sql-aliases\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2018\\\/09\\\/18\\\/workflow-manager-addendum-mp-for-sql-aliases\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2018\\\/09\\\/18\\\/workflow-manager-addendum-mp-for-sql-aliases\\\/#primaryimage\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/09\\\/disguise-glasses.jpg\",\"contentUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/09\\\/disguise-glasses.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2018\\\/09\\\/18\\\/workflow-manager-addendum-mp-for-sql-aliases\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Workflow Manager Addendum MP for SQL Aliases\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/\",\"name\":\"Kevin Justin's Blog\",\"description\":\"Operational monitoring tools including System Center, Azure Monitor\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/213cdc5c6c3f2a1d9e8417c07440972d\",\"name\":\"Kevin Justin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4c2a0d1189dd1ad7f305cf08aa9c5e2d4cc8fc26fde7ca573d3fd7e75520334e?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4c2a0d1189dd1ad7f305cf08aa9c5e2d4cc8fc26fde7ca573d3fd7e75520334e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4c2a0d1189dd1ad7f305cf08aa9c5e2d4cc8fc26fde7ca573d3fd7e75520334e?s=96&d=mm&r=g\",\"caption\":\"Kevin Justin\"},\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/author\\\/kejustin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Workflow Manager Addendum MP for SQL Aliases - Kevin Justin's Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/kevinjustin.com\/blog\/2018\/09\/18\/workflow-manager-addendum-mp-for-sql-aliases\/","og_locale":"en_US","og_type":"article","og_title":"Workflow Manager Addendum MP for SQL Aliases - Kevin Justin's Blog","og_description":"  A SQL Alias is kinda like wearing disguise glasses…   From a security perspective, you can make things difficult for attackers by specifying a SQL\u00a0alias and different port for SQL.       Symptom – discovery fails for WFM pack   Trying to monitor and figure out what the real database name, instance, etc. … Continue reading \"Workflow Manager Addendum MP for SQL Aliases\"","og_url":"https:\/\/kevinjustin.com\/blog\/2018\/09\/18\/workflow-manager-addendum-mp-for-sql-aliases\/","og_site_name":"Kevin Justin's Blog","article_published_time":"2018-09-18T19:24:26+00:00","og_image":[{"url":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2018\/09\/disguise-glasses.jpg","type":"","width":"","height":""}],"author":"Kevin Justin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Kevin Justin","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/kevinjustin.com\/blog\/2018\/09\/18\/workflow-manager-addendum-mp-for-sql-aliases\/#article","isPartOf":{"@id":"https:\/\/kevinjustin.com\/blog\/2018\/09\/18\/workflow-manager-addendum-mp-for-sql-aliases\/"},"author":{"name":"Kevin Justin","@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/213cdc5c6c3f2a1d9e8417c07440972d"},"headline":"Workflow Manager Addendum MP for SQL Aliases","datePublished":"2018-09-18T19:24:26+00:00","mainEntityOfPage":{"@id":"https:\/\/kevinjustin.com\/blog\/2018\/09\/18\/workflow-manager-addendum-mp-for-sql-aliases\/"},"wordCount":276,"commentCount":0,"image":{"@id":"https:\/\/kevinjustin.com\/blog\/2018\/09\/18\/workflow-manager-addendum-mp-for-sql-aliases\/#primaryimage"},"thumbnailUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2018\/09\/disguise-glasses.jpg","keywords":["addendum","Administration","alias","analysis","Authoring","datasourcemodule WorkflowPSDiscovery.ps1","SCOM","sharepoint","sql","sql alias","wfm","workflow","workflow manager"],"articleSection":["Administration","MP Management Pack","Troubleshooting"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/kevinjustin.com\/blog\/2018\/09\/18\/workflow-manager-addendum-mp-for-sql-aliases\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/kevinjustin.com\/blog\/2018\/09\/18\/workflow-manager-addendum-mp-for-sql-aliases\/","url":"https:\/\/kevinjustin.com\/blog\/2018\/09\/18\/workflow-manager-addendum-mp-for-sql-aliases\/","name":"Workflow Manager Addendum MP for SQL Aliases - Kevin Justin's Blog","isPartOf":{"@id":"https:\/\/kevinjustin.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/kevinjustin.com\/blog\/2018\/09\/18\/workflow-manager-addendum-mp-for-sql-aliases\/#primaryimage"},"image":{"@id":"https:\/\/kevinjustin.com\/blog\/2018\/09\/18\/workflow-manager-addendum-mp-for-sql-aliases\/#primaryimage"},"thumbnailUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2018\/09\/disguise-glasses.jpg","datePublished":"2018-09-18T19:24:26+00:00","author":{"@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/213cdc5c6c3f2a1d9e8417c07440972d"},"breadcrumb":{"@id":"https:\/\/kevinjustin.com\/blog\/2018\/09\/18\/workflow-manager-addendum-mp-for-sql-aliases\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/kevinjustin.com\/blog\/2018\/09\/18\/workflow-manager-addendum-mp-for-sql-aliases\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kevinjustin.com\/blog\/2018\/09\/18\/workflow-manager-addendum-mp-for-sql-aliases\/#primaryimage","url":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2018\/09\/disguise-glasses.jpg","contentUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2018\/09\/disguise-glasses.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/kevinjustin.com\/blog\/2018\/09\/18\/workflow-manager-addendum-mp-for-sql-aliases\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/kevinjustin.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Workflow Manager Addendum MP for SQL Aliases"}]},{"@type":"WebSite","@id":"https:\/\/kevinjustin.com\/blog\/#website","url":"https:\/\/kevinjustin.com\/blog\/","name":"Kevin Justin's Blog","description":"Operational monitoring tools including System Center, Azure Monitor","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/kevinjustin.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/213cdc5c6c3f2a1d9e8417c07440972d","name":"Kevin Justin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/4c2a0d1189dd1ad7f305cf08aa9c5e2d4cc8fc26fde7ca573d3fd7e75520334e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/4c2a0d1189dd1ad7f305cf08aa9c5e2d4cc8fc26fde7ca573d3fd7e75520334e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4c2a0d1189dd1ad7f305cf08aa9c5e2d4cc8fc26fde7ca573d3fd7e75520334e?s=96&d=mm&r=g","caption":"Kevin Justin"},"url":"https:\/\/kevinjustin.com\/blog\/author\/kejustin\/"}]}},"_links":{"self":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts\/5645","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/comments?post=5645"}],"version-history":[{"count":0,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts\/5645\/revisions"}],"wp:attachment":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/media?parent=5645"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/categories?post=5645"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/tags?post=5645"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}