Home / user-993361

mandg's questions

Martin Hope
mandg
Asked: 2024-01-05 06:02:12 +0800 CST
  • 5

Does Linux (non-AD joined) care if a mapped NFS users account is disabled in Active Directory?

For instance, I have an AD user account mapped in NFS to a Linux mount point. When I disabled that user account in AD, everything still works. Of course, when I delete that same user account in AD, access fails.

Does NFS access to the Linux mount point only relate to the UID mapping (irrespective of the accounts status in AD)?

nfs
Martin Hope
mandg
Asked: 2023-11-30 01:28:31 +0800 CST
  • 5

Does MS LDS (LDAP) have the same 5 FSMO roles that AD does? When I check in dsmgmt I'm only seeing that 2 roles are known by my LDS servers (Schema and Naming Master). Just curious if I should be seeing the other 3 roles. By the way, this is for 2016 and 2022 versions of LDS.

ad-lds
Martin Hope
mandg
Asked: 2023-09-26 00:20:58 +0800 CST
  • 5

I am looking for a way to query on issued certs from my CA based on their signing template. Here is what I start using (based on PSPKI 4.0.0 module);

$AllCerts= Get-CertificationAuthority -name CA_Authority | Get-IssuedRequest -Property Email,CertificateTemplate, CertificateTemplateOID
$RelevantInfo = ($AllCerts | ?{$_.CertificateTemplate -eq 'WebServer' -Or $_.CertificateTemplate -eq 'CustomTemplate'})

...however, the query isn't finding the 'CustomTemplate' matches. I even try using wildcard logic;

$RelevantInfo = ($AllCerts | ?{$_.CertificateTemplate -eq 'WebServer' -Or $_.CertificateTemplate -like '*CustomTemplateName*'})

I can see the values are there when I run;

Get-CertificateTemplate | Select Name, DisplayName, OID

But the query isn't finding matches for the 'CustomTemplateName'. Is there a way to actually get this 'friendly name' information for the issued certificates template?

powershell