fix: properly set includeACL for cert services

SpecterOps · Jan 16, 2024 · 3808c5a · 3808c5a
1 parent 28361f3
commit 3808c5a
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/Producers/LdapProducer.cs b/src/Producers/LdapProducer.cs
@@ -76,7 +76,7 @@ await OutputChannel.Writer.WriteAsync(new Domain
                 foreach (var searchResult in Context.LDAPUtils.QueryLDAP(ldapData.Filter.GetFilter(), SearchScope.Subtree,
                              ldapData.Props.Distinct().ToArray(), cancellationToken, domain.Name,
                              adsPath: Context.SearchBase,
-                             includeAcl: (Context.ResolvedCollectionMethods & ResolvedCollectionMethod.ACL) != 0))
+                             includeAcl: (Context.ResolvedCollectionMethods & ResolvedCollectionMethod.ACL) != 0 || (Context.ResolvedCollectionMethods & ResolvedCollectionMethod.CertServices) != 0))
                 {
                     var l = searchResult.DistinguishedName.ToLower();
                     if (l.Contains("cn=domainupdates,cn=system"))
@@ -114,7 +114,7 @@ public override async Task ProduceConfigNC()
                     foreach (var searchResult in Context.LDAPUtils.QueryLDAP(configNcData.Filter.GetFilter(), SearchScope.Subtree,
                                 configNcData.Props.Distinct().ToArray(), cancellationToken, domain.Name,
                                 adsPath: configAdsPath,
-                                includeAcl: (Context.ResolvedCollectionMethods & ResolvedCollectionMethod.ACL) != 0))
+                                includeAcl: (Context.ResolvedCollectionMethods & ResolvedCollectionMethod.ACL) != 0 || (Context.ResolvedCollectionMethods & ResolvedCollectionMethod.CertServices) != 0))
                     {
                         await Channel.Writer.WriteAsync(searchResult, cancellationToken);
                         Context.Logger.LogTrace("Producer wrote {DistinguishedName} to channel", searchResult.DistinguishedName);