Foreign Security Principal Info in Exporter Pro

[Guest]

I am trying to export group memberships in a cross-forest trust. I can see the user SAM names (e.g. domain\username) in Hyena (and AD Users) but when I export the group memberships it only dumps the SIDs.

In short I have users from Forest A in groups in Forest B and I want to dump the group memberships in Forest B and can only get SIDs.

[kstanush]

Re: Foreign Security Principal Info in Exporter Pro

The group member attributes in Hyena are hard-coded, and therefore Hyena can examine the results of each value and make appropriate adjustments. Exporter Pro has dynamic fields and just exports (displays) the results as they are returned from AD.

I think its reasonable to change the value of the name in this case to be displayable instead of just showing the raw SID. The SID can still be obtained from the DN if needed. I put a test version of exporter pro to:
http://www.systemtools.com/download/stexport2.zip

Let me know if you try this version out and if it resolves this issue.

Thanks for reporting this problem.

[Guest]

Re: Foreign Security Principal Info in Exporter Pro

No luck - still only (snipped for brevity):

distinguishedname cn
CN=S-1-5-21-220523388-1450960922-682003330-52219,CN=ForeignSecurityPrincipals,DC=bichem,DC=us S-1-5-21-220523388-1450960922-682003330-52219

I verified the version run is the one you sent - 1.8.1b.

[kstanush]

Re: Foreign Security Principal Info in Exporter Pro

Verify the export that you are running (Group export, with the export group members option enabled), and what version of a client/server operating system that you have.

Thanks

[Guest]

Re: Foreign Security Principal Info in Exporter Pro

I am running the AD (not NT) Groups export and export group members is checked (indirect is unchecked).

I also get similar results if I use the Group Members query. The User Group Membership query returns a null set.

[kstanush]

Re: Foreign Security Principal Info in Exporter Pro

If its not a security problem, please send a snippit of your output file to [email protected]

I assume the remote system is reachable, since you indicated that you can see the name in Hyena, but with Exporter Pro, you only get the SID information.

I tested this with an NT 4.0 trust, but it should be similar for other FSPs.