Trusts authentication issues

[scamwork]

Hello ! :)

Does it support authentication via Trusts?
I have done some tests which seem to show that it does not.

Thank you !

[q-roland]

Hi!

The authentication part is handled by the ldap3 and smbprotocol libraries rather than GroupPolicyBackdoor. Ldap3 and smbprotocol make use of krb5 GSSAPI for Kerberos and their NTLM authentication implementation. Authentication in Kerberos and NTLM should thus work accross trusts without too many issues (if the trusts are correctly configured / if krb5 is correctly configured).
I'Il perform some tests to confirm this and come back to you :)

Cheers,

[q-roland]

Hello again,

After performing some tests, it seems like authentication across trusts is correctly supported when using the Kerberos protocol, but not via NTLM.

I am leaving the issue open to implement the feature when I have some time available - otherwise, I am also more than happy to take pull requests!

Cheers,