Skip to content

Commit 7e8c352

Browse files
committed
Update docs, fix space in module
1 parent 3f8db70 commit 7e8c352

File tree

2 files changed

+6
-5
lines changed
  • documentation/modules/auxiliary/server/relay
  • modules/auxiliary/server/relay

2 files changed

+6
-5
lines changed

documentation/modules/auxiliary/server/relay/esc8.md

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -20,10 +20,12 @@ The issue mode. This controls what the module will do once an authenticated sess
2020
server. Must be one of the following options:
2121

2222
* ALL: Enumerate all available certificate templates and then issue each of them
23-
* AUTO: Automatically select either the `User` or `Machine` template to issue based on if the authenticated user is a
24-
user or machine account. The determination is based on checking for a `$` at the end of the name, which means that it
25-
is a machine account.
26-
* QUERY_ONLY: Enumerate all available certificate templates but do not issue any
23+
* AUTO: Automatically select either the `User` or `DomainController` and `Machine` (`Computer`) templates to issue
24+
based on if the authenticated user is a user or machine account. The determination is based on checking for a `$`
25+
at the end of the name, which means that it is a machine account.
26+
* QUERY_ONLY: Enumerate all available certificate templates but do not issue any. Not all certificate templates
27+
available for use will be displayed; templates with the flag CT_FLAG_MACHINE_TYPE set will not show available and
28+
include `Machine` (AKA `Computer`) and `DomainController`
2729
* SPECIFIC_TEMPLATE: Issue the certificate template specified in the `CERT_TEMPLATE` option
2830

2931
### CERT_TEMPLATE

modules/auxiliary/server/relay/esc8.rb

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -111,7 +111,6 @@ def on_relay_success(relay_connection:, relay_identity:)
111111
retrieve_certs(relay_connection, relay_identity, cert_template)
112112
when 'ALL', 'QUERY_ONLY'
113113
cert_templates = get_cert_templates(relay_connection)
114-
115114
unless cert_templates.nil? || cert_templates.empty?
116115
print_status('***Templates with CT_FLAG_MACHINE_TYPE set like Machine and DomainController will not display as available, even if they are.***')
117116
print_good("Available Certificates for #{relay_identity} on #{datastore['RELAY_TARGET']}: #{cert_templates.join(', ')}")

0 commit comments

Comments
 (0)