Skip to content

[Bug] Certipy version >5.0 - Failed to Retrieve CA configuration (rpc_s_access_denied)Β #339

@rreimao

Description

@rreimao

πŸ”’ Certipy Version

5.0.3

πŸ–₯️ Operating System

Kali Linux v2025.3

πŸ“₯ Command Used

certipy-ad find -u 'USER@MYDOMAIN.com' -p 'MYPASS' -stdout -dc-ip 10.0.0.1 -vulnerable

🧯 Error Message / Unexpected Output

[*] Retrieving CA configuration for 'MYCA-1' via RRP
[!] Failed to get CA configuration for 'MYCA-1' via RRP: DCERPC Runtime Error: code: 0x5 - rpc_s_access_denied 
[!] Use -debug to print a stacktrace
[!] Could not retrieve configuration for 'MYCA-1'

πŸ” Relevant certipy find Output (abbreviated and redacted)


βœ… Expected Behavior

Hi, after updating Certipy to its latest version, I'm not able to enumerate my CA anymore. Using version 4.8, I was able to get the CA configuration. Now, with 5.0.3 and 5.0.4, this no longer works. I'm suspecting it's due to the new version using RRP for enumeration instead of CSRA.

Image Image

πŸ“Ž Additional Context

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions