search

aniqfakhrul / powerview.py

Just another Powerview alternative
MIT License
427 stars 47 forks source link

[Set-DomainObject] Set an attribut with a DN #57

Closed BlWasp closed 1 year ago

BlWasp commented 1 year ago

Hi all,

I'm trying to use the Set-DomainObject function on an attribute that is waiting for a DN (more exactly, the msDS-RevealOnDemandGroup attribute on a RODC). However, it looks like the command doesn't work with a DN.

Here is my exact command and the triggered error:

PV > Set-DomainObject -Identity lab-dc$ -Set msDS-RevealOnDemandGroup='CN=Administrator,CN=Users,DC=lab,DC=local' ERROR:root:000020B5: AtrErr: DSID-03153438, #1: 0: 000020B5: DSID-03153438, problem 1005 (CONSTRAINT_ATT_TYPE), data 0, Att 90788 (msDS-RevealOnDemandGroup)

According to what I have found on Internet, it looks like a problem of DN format. I guess it is an issue with the fact that Set-DomainObject send a string and not a correctly formated DN. Is it a known issue ?

BlWasp commented 1 year ago

Okey, no, it looks like you're building a list from my string. By forcing the value to be equal to the dn (attr_val = 'CN=Administrator,CN=Users,DC=lab,DC=local') it works like a charm :smiley: . I will push a PR when I will have time.

BlWasp commented 1 year ago

PR open