Hi Yan,

Actually this was easier to fix than I expected.

Here is the link to the patch:
https://github.com/inverse-inc/packetfence/commit/123dc79e7b8e72952a5963caebbbfd151947855e.diff

I tested it and I'm still able to perform the sync with the updated script, we'll have to see if the MSFT segfault problematic returns.

Best Regards,

--
Julien Semaan
[email protected]   ::  +1 (866) 353-6153 *155  ::www.inverse.ca
Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence 
(www.packetfence.org)



On 2018-03-21 08:22 AM, Julien Semaan wrote:
Hi Yan,

First, of all, thanks a lot for this very advanced troubleshooting. We tried without success to get this problem reported to Microsoft by our users without success.

For my personal curiosity, did you get this issue looked at through Microsoft support directly ? Or through a developpers list they have ? If its the latest, I'd like to know if you could share the location of that post.

Now, for getting that fixed...

With what you've provided, it seems we only need to add drsuapi.DRS_EXT_NONDOMAIN_NCS in the dwFlags inside secretsdump.py

I will perform a test to make sure the script still works with that and then I'll post a link to the Github PR here so that you can patch the environment.

I'm expecting the fix to be quite simple, what will likely be long is the test which I should be able to complete before tomorrow (in N-A)

Best Regards,

- Julien Semaan

On 2018-03-19 11:52 PM, Yan via PacketFence-users wrote:
Sorry for my typo, the issue script is not /usr/lib/python2.7/site-packages/impacket/dcerpc/v5/drsuapi.py ,it's /usr/local/pf/addons/AD/secretsdump.py this script which lacked of "DRS_EXT_NONDOMAIN_NCS" flag when sending replication to AD server and caused AD server rebooting. Hope for your reply.


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org!http://sdm.link/slashdot


_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to