Skip to content

Conversation

@jheysel-r7
Copy link
Contributor

The acceptance tests for our LDAP modules get run against a docker container running OpenLDAP which does not support the LDAP whoami extended operation OID: 1.3.6.1.4.1.4203.1.11.3. This is a problem because the ldap_esc_vulnerable_cert_finder is meant to be run against a Windows AD LDAP environment which does support this OID. This means, unfortunately, at the current time we are unable to support testing this module.

            +[+] Successfully bound to the LDAP server via existing SESSION!
            +[*] Discovering base DN automatically
            +[-] Auxiliary aborted due to failure: unknown: Net::LDAP::Error: 127.0.0.1:389 LDAP Error: Extended Operation(1.3.6.1.4.1.4203.1.11.3) not supported
            +[*] Auxiliary module execution completed

Verification

List the steps needed to make sure this thing works

  • Ensure CI tests pass

@adfoster-r7
Copy link
Contributor

Not a blocker; I think this test might still be useful to catch unexpected exceptions being raised in this module - i.e. unexpected ldap client failures etc

@smcintyre-r7 smcintyre-r7 merged commit c77578d into rapid7:master Dec 5, 2025
82 of 87 checks passed
@smcintyre-r7 smcintyre-r7 added the rn-no-release-notes no release notes label Dec 5, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

rn-no-release-notes no release notes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants