Struct SamrAliasClient 

pub struct SamrAliasClient<'a> { /* private fields */ }

SAMR bound over an open \samr pipe, with both the upstream calls and the alias ones.

Implementations

impl<'a> SamrAliasClient<'a>

pub async fn bind(client: &'a mut SmbClient, file_id: [u8; 16]) -> Result<Self>

Bind SAMR. Like dcerpc’s SamrClient::bind, but keeps the pipe reachable so we can call arbitrary opnums.

pub async fn connect(&mut self, server: &str) -> Result<SamrHandle>

SamrConnect2 -> server handle.

pub async fn open_domain( &mut self, server: &SamrHandle, sid: &Sid, ) -> Result<SamrHandle>

SamrOpenDomain on an arbitrary domain SID -> domain handle.

pub async fn open_builtin(&mut self, server: &SamrHandle) -> Result<SamrHandle>

SamrOpenDomain on S-1-5-32, the BUILTIN domain that holds the aliases.

pub async fn machine_sid( &mut self, server: &SamrHandle, ) -> Result<Option<(String, Sid)>>

The host’s own domain SID, used as the local-member filter prefix.

SAMR exposes two domains: Builtin, plus one named after the machine (member host) or the domain (DC). We look up the second. Mirrors SharpHound’s server.GetMachineSid(), and avoids needing LSA or LDAP.

On a DC this is the domain SID, see is_domain_controller.

pub async fn open_alias( &mut self, domain: &SamrHandle, rid: u32, ) -> Result<SamrHandle>

SamrOpenAlias(rid) with ALIAS_LIST_MEMBERS only -> alias handle.

pub async fn get_members_in_alias( &mut self, alias: &SamrHandle, ) -> Result<Vec<Sid>>

SamrGetMembersInAlias -> the member SIDs.

pub async fn close_handle(&mut self, handle: &SamrHandle) -> Result<()>

SamrCloseHandle, best effort: a leaked handle dies with the pipe.