Skip to content

Conversation

@jheysel-r7
Copy link
Contributor

The acceptance tests for our LDAP modules get run against a docker container running OpenLDAP which does not support the LDAP whoami extended operation OID: 1.3.6.1.4.1.4203.1.11.3. This is a problem because the ldap_esc_vulnerable_cert_finder is meant to be run against a Windows AD LDAP environment which does support this OID. This means, unfortunately, at the current time we are unable to support testing this module.

            +[+] Successfully bound to the LDAP server via existing SESSION!
            +[*] Discovering base DN automatically
            +[-] Auxiliary aborted due to failure: unknown: Net::LDAP::Error: 127.0.0.1:389 LDAP Error: Extended Operation(1.3.6.1.4.1.4203.1.11.3) not supported
            +[*] Auxiliary module execution completed

Verification

List the steps needed to make sure this thing works

  • Ensure CI tests pass

@adfoster-r7
Copy link
Contributor

Not a blocker; I think this test might still be useful to catch unexpected exceptions being raised in this module - i.e. unexpected ldap client failures etc

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants