Closed ademenet closed 9 months ago
Okay, I guess I found the error: a typo in the region
variable in hosts
. I replayed all playbooks and it works with gollum
. I guess the DNS is involved in its setup.
Now, I am facing a new issue: I can't manage to list users with either enum4linux
or crackmapexec
. I am wondering if the anonymous setup well or if its still a DNS issue. Any idea?
Thank you!
Hello,
Thank you for giving the lab a try ! There is often issues at this moment, that's why there is a loop to try this request multiple times. It is often because the command is looking for 'mordor.local\gollum' under: 'DC=eriador,DC=middle-earth,DC=local', instead of using the 'mordor.local' domain. I haven't find a fix for it yet, but running the command later works most of the time.
Regarding the anonymous issue, did you target the RIVENDELL server ? It only works on DC02 by design. I tried and it works after applying the ad-acl.yml rules and then rebooting DC02. If it still doesn't work, could you open another issue with your command and result ?
Thank you,
Hello!
Thank you for your reply.
I haven't find a fix for it yet, but running the command later works most of the time.
Apparently yes. But sometimes it keeps failing. Weird. I will look into it so as to maybe find a check to trigger the later config.
Regarding the anonymous issue, did you target the RIVENDELL server ? It only works on DC02 by design. I tried and it works after applying the ad-acl.yml rules and then rebooting DC02. If it still doesn't work, could you open another issue with your command and result ?
You were right! I am going to update the ad-acl.yml
rules to add a small reboot at the end. Maybe I can do a PR if it works well. What do you think?
Yes you're welcome to do any PR to improve the project !
Hello!
I am running into an issue while running the following command:
During the task
groups/cross_domains : Add a domain user/group from another Domain in the multi-domain forest to a domain group
I have three attempts like:And it finally crashed. Here is the full traceback:
I did some testing and found that the task succeed if I remove the user
mordor.local\\gollum
frommulti_domain_groups_member
list inconfig.json
:Then, I am able to run the remaining playbooks smoothly without any errors. But I guess I am losing an exploit opportunity.
Any idea on how I can solve that? I don't know where to look.
Thank you very much for any clues you can give and thank @0xBallpoint for the hard work!