netwrix / pingcastle

PingCastle - Get Active Directory Security at 80% in 20% of the time
https://www.pingcastle.com
Other
2.35k stars 292 forks source link

Cannot add multiple HoneyPot Exclusions with DistinguishedName #226

Closed faebusihe closed 4 months ago

faebusihe commented 7 months ago

When Multiple HoneyPot Exclusions are added with DistinguishedName....:

Pingcastle.exe fails with:

Starting the task: Perform analysis for DOMAIN [16:44:55] An exception occured when doing the task: Perform analysis for DOMAIN Note: you can run the program with the switch --log to get more detail Exception: The entry '' has already been added. (C:\Program Files\PingCastle\PingCastle.exe.Config line 57) at System.Configuration.BaseConfigurationRecord.EvaluateOne(String[] keys, SectionInput input, Boolean isTrusted, FactoryRecord factoryRecord, SectionRecord sectionRecord, Object parentResult) at System.Configuration.BaseConfigurationRecord.Evaluate(FactoryRecord factoryRecord, SectionRecord sectionRecord, Object parentResult, Boolean getLkg, Boolean getRuntimeObject, Object& result, Object& resultRuntimeObject) at System.Configuration.BaseConfigurationRecord.GetSectionRecursive(String configKey, Boolean getLkg, Boolean checkPermission, Boolean getRuntimeObject, Boolean requestIsHere, Object& result, Object& resultRuntimeObject) at System.Configuration.BaseConfigurationRecord.GetSectionRecursive(String configKey, Boolean getLkg, Boolean checkPermission, Boolean getRuntimeObject, Boolean requestIsHere, Object& result, Object& resultRuntimeObject) at System.Configuration.BaseConfigurationRecord.GetSectionRecursive(String configKey, Boolean getLkg, Boolean checkPermission, Boolean getRuntimeObject, Boolean requestIsHere, Object& result, Object& resultRuntimeObject) at System.Configuration.BaseConfigurationRecord.GetSection(String configKey) at System.Configuration.ConfigurationManager.GetSection(String sectionName) at PingCastle.Healthcheck.HoneyPotSettings.GetEncryptionSettings() in c:\git\PingCastle\Healthcheck\HoneyPotSettings.cs:line 10 at PingCastle.Healthcheck.HealthcheckAnalyzer.LoadHoneyPotData() in c:\git\PingCastle\Healthcheck\HealthcheckAnalyzer.cs:line 184 at PingCastle.Healthcheck.HealthcheckAnalyzer.PerformAnalyze(PingCastleAnalyzerParameters parameters) in c:\git\PingCastle\Healthcheck\HealthcheckAnalyzer.cs:line 96 at PingCastle.Tasks.<>cDisplayClass18.b17() in c:\git\PingCastle\Tasks.cs:line 552 at PingCastle.Tasks.StartTask(String taskname, TaskDelegate taskdelegate) in c:\git\PingCastle\Tasks.cs:line 1371

Version 3.2.0

vletoux commented 4 months ago

This is working perfectly: image

This is because you added the honey pot section (not a user) more than once - the error message is pretty explicit.