search

csababarta / ntdsxtract

Active Directory forensic framework
http://www.ntdsxtract.com
GNU General Public License v3.0
311 stars 109 forks source link

Dump cannot be completed? #16

Closed mekhalleh closed 8 years ago

mekhalleh commented 8 years ago

Hello,

I encounter always the same error with always the same username. The extraction is stopped...

Dump from Microsoft Windows 2008 R2 Have you an idea ?

Thanks in advance.

Traceback (most recent call last): File "/usr/local/src/ntdsxtract/dsusers.py", line 513, in processUser(user) File "/usr/local/src/ntdsxtract/dsusers.py", line 97, in processUser sys.stdout.write(str(user)) File "/usr/local/src/ntdsxtract/ntds/dsobjects.py", line 378, in str ancestors = self.getAncestors(self.DB) File "/usr/local/src/ntdsxtract/ntds/dsobjects.py", line 108, in getAncestors ancestor = dsObject(dsDatabase, ancestorid) File "/usr/local/src/ntdsxtract/ntds/dsobjects.py", line 57, in init raise BaseException BaseException

ophc commented 8 years ago

same problem here, with 1.3.1 ==============Traceback (most recent call last): File "/opt/ntdsxtract-master/dsusers.py", line 505, in processUser(user) File "/opt/ntdsxtract-master/dsusers.py", line 97, in processUser sys.stdout.write(str(user)) File "/opt/ntdsxtract-master/ntds/dsobjects.py", line 378, in str ancestors = self.getAncestors(self.DB) File "/opt/ntdsxtract-master/ntds/dsobjects.py", line 108, in getAncestors ancestor = dsObject(dsDatabase, ancestorid) File "/opt/ntdsxtract-master/ntds/dsobjects.py", line 57, in init raise BaseException BaseException

mekhalleh commented 8 years ago

Corrected unofficially, I have sent you a pull request.

https://github.com/csababarta/ntdsxtract/pull/17

ktneely commented 8 years ago

@mekhalleh nice fix, I just tested it with my setup and it worked perfectly on files pulled from a shadow copy of 2012 AD server.