search

noirello / bonsai

Simple Python 3 module for LDAP, using libldap2 and winldap C libraries.
MIT License
116 stars 32 forks source link

Getting ACL for servers #49

Closed reach4bawer closed 2 years ago

reach4bawer commented 3 years ago

Is there a way to find ACL for AD servers to see what type of access do users have on the active directory server. So something equivalent to Get-ACL Powershell command. An example of details that are returned by this command screenshot -

image

Is there a way to pull this information using Bonsai?

noirello commented 3 years ago

I'm not familiar with AD enough. If these attributes are part of an LDAP entity, then you should be able to collect them with Bonsai. This problem seems like more as a how to map AD specific objects to standard LDAP expressions, and not strongly connected to the module.

reach4bawer commented 3 years ago

Yea you can see the same attributes in the UI as well. image

These access control entries are can be seen with the UI without any special permissions. So I am assuming that this might available via cli/programmatically as well.

reach4bawer commented 3 years ago

I found this link so some of these details are stored.

noirello commented 2 years ago

Just released 1.3.0 that has some helper classes for Active Directory. See some details in the docs.