File tree Expand file tree Collapse file tree 2 files changed +6
-5
lines changed
documentation/modules/auxiliary/server/relay
modules/auxiliary/server/relay Expand file tree Collapse file tree 2 files changed +6
-5
lines changed Original file line number Diff line number Diff line change @@ -20,10 +20,12 @@ The issue mode. This controls what the module will do once an authenticated sess
2020server. Must be one of the following options:
2121
2222* ALL: Enumerate all available certificate templates and then issue each of them
23- * AUTO: Automatically select either the ` User ` or ` Machine ` template to issue based on if the authenticated user is a
24- user or machine account. The determination is based on checking for a ` $ ` at the end of the name, which means that it
25- is a machine account.
26- * QUERY_ONLY: Enumerate all available certificate templates but do not issue any
23+ * AUTO: Automatically select either the ` User ` or ` DomainController ` and ` Machine ` (` Computer ` ) templates to issue
24+ based on if the authenticated user is a user or machine account. The determination is based on checking for a ` $ `
25+ at the end of the name, which means that it is a machine account.
26+ * QUERY_ONLY: Enumerate all available certificate templates but do not issue any. Not all certificate templates
27+ available for use will be displayed; templates with the flag CT_FLAG_MACHINE_TYPE set will not show available and
28+ include ` Machine ` (AKA ` Computer ` ) and ` DomainController `
2729* SPECIFIC_TEMPLATE: Issue the certificate template specified in the ` CERT_TEMPLATE ` option
2830
2931### CERT_TEMPLATE
Original file line number Diff line number Diff line change @@ -111,7 +111,6 @@ def on_relay_success(relay_connection:, relay_identity:)
111111 retrieve_certs ( relay_connection , relay_identity , cert_template )
112112 when 'ALL' , 'QUERY_ONLY'
113113 cert_templates = get_cert_templates ( relay_connection )
114-
115114 unless cert_templates . nil? || cert_templates . empty?
116115 print_status ( '***Templates with CT_FLAG_MACHINE_TYPE set like Machine and DomainController will not display as available, even if they are.***' )
117116 print_good ( "Available Certificates for #{ relay_identity } on #{ datastore [ 'RELAY_TARGET' ] } : #{ cert_templates . join ( ', ' ) } " )
You can’t perform that action at this time.
0 commit comments