Method test_ldap_connection

utils/impacket_auth.py:151–217

Test LDAP connection

(self, verbose=True)

            return False
    
    def test_ldap_connection(self, verbose=True):
        """Test LDAP connection"""
        try:
            if verbose:
                logger.debug(f"Trying LDAP connection to {self.target}")
            
            # For Kerberos, skip detailed LDAP test to avoid delays
            if self.use_kerberos and self.kerberos_ticket:
                if verbose:
                    logger.debug("Skipping detailed LDAP test for Kerberos (speed optimization)")
                return True  # Assume it works if we got here
            
            # Create LDAP connection
            if self.use_kerberos and self.kerberos_ticket:
                if verbose:
                    logger.debug("Using Kerberos ticket")
                if not self._load_kerberos_ticket():
                    return False
                ldapConnection = LDAPConnection(f'ldap://{self.target}')
                ldapConnection.kerberosLogin(self.username, self.password, self.domain,
                                           self.lm_hash, self.nt_hash, useCache=True)
            
            elif self.ntlm_hash:
                if verbose:
                    logger.debug("Using NTLM hash")
                ldapConnection = LDAPConnection(f'ldap://{self.target}')
                ldapConnection.login(self.username, self.password, self.domain,
                                   self.lm_hash, self.nt_hash)
            
            else:
                if verbose:
                    logger.debug("Using plain password")
                ldapConnection = LDAPConnection(f'ldap://{self.target}')
                ldapConnection.login(self.username, self.password, self.domain)
            
            if verbose:
                logger.debug("LDAP connection successful!")
            
            # Test domain info
            base_dn = f"DC={self.domain.replace('.', ',DC=')}"
            search_filter = "(objectClass=domain)"
            attributes = ['name', 'objectSid', 'whenCreated']
            
            resp = ldapConnection.search(
                searchBase=base_dn,
                scope=2,  # SCOPE_SUBTREE
                searchFilter=search_filter,
                attributes=attributes,
                sizeLimit=1
            )
            
            if verbose:
                for item in resp:
                    if isinstance(item, ldapasn1.SearchResultEntry):
                        logger.debug(f"Domain information:")
                        for attr in item['attributes']:
                            attr_name = str(attr['type'])
                            attr_values = [str(val) for val in attr['vals']]