[GH-ISSUE #9] Group membership or delegation check via LDAP #4

Closed
opened 2026-02-26 03:33:28 +03:00 by kerem · 1 comment
Owner

Originally created by @laurivosandi on GitHub (Feb 7, 2016).
Original GitHub issue: https://github.com/laurivosandi/certidude/issues/9

Currently the domain admins group membership check is not performed within Python code. AD-compatible domain controllers also supply PAC, which can be used to check group membership avoiding additional LDAP query.

Originally created by @laurivosandi on GitHub (Feb 7, 2016). Original GitHub issue: https://github.com/laurivosandi/certidude/issues/9 Currently the domain admins group membership check is not performed within Python code. AD-compatible domain controllers also supply [PAC](http://blogs.msdn.com/b/openspecification/archive/2009/04/24/understanding-microsoft-kerberos-pac-validation.aspx), which can be used to check group membership avoiding additional LDAP query.
kerem closed this issue 2026-02-26 03:33:29 +03:00
Author
Owner

@laurivosandi commented on GitHub (May 10, 2016):

Group membership check implemented with LDAP filters

<!-- gh-comment-id:218074659 --> @laurivosandi commented on GitHub (May 10, 2016): Group membership check implemented with LDAP filters
Sign in to join this conversation.
No labels
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/certidude-laurivosandi#4
No description provided.