gMSA Support?

[Brian Drennan]

Hi all,

My org uses Active Directory on-prem with Group-Managed Service Accounts (gMSAs). The public documentation is available here: https://docs.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/group-managed-service-accounts-overview

I've been looking into how we can run RabbitMQ and allow our services to communicate authenticate and authorized using a gMSA, but can't find any public references for how to do it. The trouble is that a running application doesn't have any obvious mechanisms available to obtain the password, which obviously limits the ability to login. Is there a way for this to work, or should I consider an alternative authentication mechanism?

Thanks,

- Brian