public void DomainTrustProcessor_EnumerateDomainTrusts_HappyPath()
{
var mockUtils = new Mock <MockLDAPUtils>();
var searchResults = new[]
{
new MockSearchResultEntry("CN\u003dexternal.local,CN\u003dSystem,DC\u003dtestlab,DC\u003dlocal",
new Dictionary <string, object>
{
{ "trustdirection", "3" },
{ "trusttype", "2" },
{ "trustattributes", 0x24.ToString() },
{ "cn", "external.local" },
{ "securityidentifier", Helpers.B64ToBytes("AQQAAAAAAAUVAAAA7JjftxhaHTnafGWh") }
}, "", Label.Domain)
};
mockUtils.Setup(x => x.QueryLDAP(It.IsAny <string>(), It.IsAny <SearchScope>(), It.IsAny <string[]>(),
It.IsAny <string>(), It.IsAny <bool>(), It.IsAny <bool>(), It.IsAny <string>(), It.IsAny <bool>(),
It.IsAny <bool>())).Returns(searchResults);
var processor = new DomainTrustProcessor(mockUtils.Object);
var test = processor.EnumerateDomainTrusts("testlab.local").ToArray();
Assert.Single(test);
var trust = test.First();
Assert.Equal(TrustDirection.Bidirectional, trust.TrustDirection);
Assert.Equal("EXTERNAL.LOCAL", trust.TargetDomainName);
Assert.Equal("S-1-5-21-3084884204-958224920-2707782874", trust.TargetDomainSid);
Assert.True(trust.IsTransitive);
Assert.Equal(TrustType.ParentChild, trust.TrustType);
Assert.True(trust.SidFilteringEnabled);
}
private async Task <Domain> ProcessDomainObject(ISearchResultEntry entry,
ResolvedSearchResult resolvedSearchResult)
{
var ret = new Domain
{
ObjectIdentifier = resolvedSearchResult.ObjectId
};
ret.Properties.Add("domain", resolvedSearchResult.Domain);
ret.Properties.Add("name", resolvedSearchResult.DisplayName);
ret.Properties.Add("distinguishedname", entry.DistinguishedName.ToUpper());
ret.Properties.Add("domainsid", resolvedSearchResult.DomainSid);
ret.Properties.Add("highvalue", true);
if ((_methods & ResolvedCollectionMethod.ACL) != 0)
{
ret.Aces = _aclProcessor.ProcessACL(resolvedSearchResult, entry).ToArray();
ret.IsACLProtected = _aclProcessor.IsACLProtected(entry);
}
if ((_methods & ResolvedCollectionMethod.Trusts) != 0)
{
ret.Trusts = _domainTrustProcessor.EnumerateDomainTrusts(resolvedSearchResult.Domain).ToArray();
}
if ((_methods & ResolvedCollectionMethod.ObjectProps) != 0)
{
ret.Properties = ContextUtils.Merge(ret.Properties, LDAPPropertyProcessor.ReadDomainProperties(entry));
if (_context.Flags.CollectAllProperties)
{
ret.Properties = ContextUtils.Merge(_ldapPropertyProcessor.ParseAllProperties(entry),
ret.Properties);
}
}
if ((_methods & ResolvedCollectionMethod.Container) != 0)
{
ret.ChildObjects = _containerProcessor.GetContainerChildObjects(resolvedSearchResult, entry).ToArray();
ret.Links = _containerProcessor.ReadContainerGPLinks(resolvedSearchResult, entry).ToArray();
}
if ((_methods & ResolvedCollectionMethod.GPOLocalGroup) != 0)
{
var gplink = entry.GetProperty(LDAPProperties.GPLink);
ret.GPOChanges = await _gpoLocalGroupProcessor.ReadGPOLocalGroups(gplink, entry.DistinguishedName);
}
return(ret);
}
public void DomainTrustProcessor_EnumerateDomainTrusts_SadPaths()
{
var mockUtils = new Mock <MockLDAPUtils>();
var searchResults = new[]
{
new MockSearchResultEntry("CN\u003dexternal.local,CN\u003dSystem,DC\u003dtestlab,DC\u003dlocal",
new Dictionary <string, object>
{
{ "trustdirection", "3" },
{ "trusttype", "2" },
{ "trustattributes", 0x24.ToString() },
{ "cn", "external.local" },
{ "securityIdentifier", Array.Empty <byte>() }
}, "", Label.Domain),
new MockSearchResultEntry("CN\u003dexternal.local,CN\u003dSystem,DC\u003dtestlab,DC\u003dlocal",
new Dictionary <string, object>
{
{ "trustdirection", "3" },
{ "trusttype", "2" },
{ "trustattributes", 0x24.ToString() },
{ "cn", "external.local" },
{ "securityIdentifier", Helpers.B64ToBytes("QQQAAAAAAAUVAAAA7JjftxhaHTnafGWh") }
}, "", Label.Domain),
new MockSearchResultEntry("CN\u003dexternal.local,CN\u003dSystem,DC\u003dtestlab,DC\u003dlocal",
new Dictionary <string, object>
{
{ "trusttype", "2" },
{ "trustattributes", 0x24.ToString() },
{ "cn", "external.local" },
{ "securityIdentifier", Helpers.B64ToBytes("AQQAAAAAAAUVAAAA7JjftxhaHTnafGWh") }
}, "", Label.Domain),
new MockSearchResultEntry("CN\u003dexternal.local,CN\u003dSystem,DC\u003dtestlab,DC\u003dlocal",
new Dictionary <string, object>
{
{ "trustdirection", "3" },
{ "trusttype", "2" },
{ "cn", "external.local" },
{ "securityIdentifier", Helpers.B64ToBytes("AQQAAAAAAAUVAAAA7JjftxhaHTnafGWh") }
}, "", Label.Domain)
};
mockUtils.Setup(x => x.QueryLDAP(It.IsAny <string>(), It.IsAny <SearchScope>(), It.IsAny <string[]>(),
It.IsAny <string>(), It.IsAny <bool>(), It.IsAny <bool>(), It.IsAny <string>(), It.IsAny <bool>(),
It.IsAny <bool>())).Returns(searchResults);
var processor = new DomainTrustProcessor(mockUtils.Object);
var test = processor.EnumerateDomainTrusts("testlab.local");
Assert.Empty(test);
}
