CSEC_PUBLIC/WELA
1
0 Fork 0
mirror of https://github.com/Yamato-Security/WELA.git synced 2026-11-02 19:28:19 +01:00
Code Issues Packages Projects Releases Wiki Activity

Reject LDAP options before profile command dispatch

Browse Source
This commit is contained in:
Shirofune-Security committed 2026-09-19 07:15:31 +09:00
1 parent 9e2b4b5b43
commit c7cfb0d112
7 files changed
+55 -11
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

docs/ldap-diagnostics.md
+2
View File
@@ -4,6 +4,8 @@ Normal `configure` preserves existing LDAP diagnostics and explains that 1644 is
The dedicated local workflow supports Server 2022/2025 DC builds 20348/26100 in 64-bit Windows PowerShell 5.1 or PowerShell 7. Client, member server and member-server CA hosts are not applicable. Unknown or conflicting role/build evidence blocks writes; no NTDS settings are created on a non-DC.
LDAP options require the dedicated `ldap-diagnostics` command. Supplying them to another command, including `configure -Profile`, stops before that command runs.
```powershell
./WELA.ps1 ldap-diagnostics -LdapAction Audit -ResultsPath ldap-before.json
./WELA.ps1 ldap-diagnostics -LdapAction Plan -LdapMode Diagnostic -LdapSearchTimeMs 100