Announcement

Collapse
No announcement yet.

Foreign Security Principal Info in Exporter Pro

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • kstanush
    replied
    Re: Foreign Security Principal Info in Exporter Pro

    If its not a security problem, please send a snippit of your output file to [email protected]

    I assume the remote system is reachable, since you indicated that you can see the name in Hyena, but with Exporter Pro, you only get the SID information.

    I tested this with an NT 4.0 trust, but it should be similar for other FSPs.

    Leave a comment:


  • Narnian
    replied
    Re: Foreign Security Principal Info in Exporter Pro

    I am running the AD (not NT) Groups export and export group members is checked (indirect is unchecked).

    I also get similar results if I use the Group Members query. The User Group Membership query returns a null set.

    Leave a comment:


  • kstanush
    replied
    Re: Foreign Security Principal Info in Exporter Pro

    Verify the export that you are running (Group export, with the export group members option enabled), and what version of a client/server operating system that you have.

    Thanks

    Leave a comment:


  • Narnian
    replied
    Re: Foreign Security Principal Info in Exporter Pro

    No luck - still only (snipped for brevity):

    distinguishedname cn
    CN=S-1-5-21-220523388-1450960922-682003330-52219,CN=ForeignSecurityPrincipals,DC=bichem,DC=us S-1-5-21-220523388-1450960922-682003330-52219

    I verified the version run is the one you sent - 1.8.1b.

    Leave a comment:


  • kstanush
    replied
    Re: Foreign Security Principal Info in Exporter Pro

    The group member attributes in Hyena are hard-coded, and therefore Hyena can examine the results of each value and make appropriate adjustments. Exporter Pro has dynamic fields and just exports (displays) the results as they are returned from AD.

    I think its reasonable to change the value of the name in this case to be displayable instead of just showing the raw SID. The SID can still be obtained from the DN if needed. I put a test version of exporter pro to:
    http://www.systemtools.com/download/stexport2.zip

    Let me know if you try this version out and if it resolves this issue.

    Thanks for reporting this problem.

    Leave a comment:


  • Narnian
    started a topic Foreign Security Principal Info in Exporter Pro

    Foreign Security Principal Info in Exporter Pro

    I am trying to export group memberships in a cross-forest trust. I can see the user SAM names (e.g. domain\username) in Hyena (and AD Users) but when I export the group memberships it only dumps the SIDs.

    In short I have users from Forest A in groups in Forest B and I want to dump the group memberships in Forest B and can only get SIDs.
Working...
X