Skip to content

Commit 4045bb4

Browse files
committed
Deactivate kerberos auth when retrieved laps creds
1 parent 9d8eeb8 commit 4045bb4

2 files changed

Lines changed: 2 additions & 1 deletion

File tree

nxc/connection.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -482,7 +482,7 @@ def try_credentials(self, domain, username, owned, secret, cred_type, data=None)
482482

483483
with sem:
484484
if cred_type == "plaintext":
485-
if self.args.kerberos and not hasattr(self.args, "laps"):
485+
if self.args.kerberos:
486486
self.logger.debug("Trying to authenticate using Kerberos")
487487
return self.kerberos_login(domain, username, secret, "", "", self.kdcHost, False)
488488
elif hasattr(self.args, "domain"): # Some protocols don't use domain for login

nxc/protocols/ldap/laps.py

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -360,6 +360,7 @@ def laps_search(self, username, password, cred_type, domain, dns_server):
360360
password = msMCSAdmPwd
361361
domain = self.hostname
362362
self.args.local_auth = True
363+
self.args.kerberos = False
363364
self.logger.extra["protocol"] = prev_protocol
364365
self.logger.extra["port"] = prev_port
365366
return username, password, domain

0 commit comments

Comments
 (0)