Method viewsec

scapy/modules/ldaphero.py:742–1236

View security descriptor

(self, *args)

        self.sidscombo = {self._rslvsid(x): x for x in self.sids.keys()}

    def viewsec(self, *args):
        """
        View security descriptor
        """
        # Get clicked item
        item = self.tk_tree.selection()[0]

        # Get SD
        try:
            results = self.client.search(
                baseObject=item,
                scope=0,
                attributes=["ntSecurityDescriptor"],
                controls=[
                    LDAP_Control(
                        controlType="1.2.840.113556.1.4.801",
                        criticality=True,
                        controlValue=LDAP_serverSDFlagsControl(
                            flags="OWNER+GROUP+DACL+SACL",
                        ),
                    )
                ],
            )
        except LDAP_Exception as ex:
            self.tprint(
                ex.diagnosticMessage or "Error: %s" % ex.resultCode,
                tags=["error"],
            )
            return

        if item not in results:
            return

        try:
            nTSecurityDescriptor = SECURITY_DESCRIPTOR(
                results[item]["nTSecurityDescriptor"][0]
            )
        except LDAP_Exception as ex:
            self.tprint(
                "Error parsing the Security Descriptor: " + str(ex),
                tags=["error"],
            )
            return

        # Resolve the guids
        if not self.load_guids():
            return

        # Pre-resolve all the SIDs.
        owner = getattr(nTSecurityDescriptor, "OwnerSid", None)
        group = getattr(nTSecurityDescriptor, "GroupSid", None)
        _to_resolve = [
            owner,
            group,
        ]
        if hasattr(nTSecurityDescriptor, "DACL"):
            _to_resolve.extend(x.Sid for x in nTSecurityDescriptor.DACL.Aces)
        if hasattr(nTSecurityDescriptor, "SACL"):