Can't connect to LDAP about sharphound2

[liamcs98]

I had this same-ish problem. The weird thing is that I could do a scan against one domain, however not other trusted domains in the forest...until I did "-SearchForest" which worked perfectly!

For your problem, try doing a -SearchForest, then maybe do a run as (see below), all with -verbose flag.

runas /netonly /user:bestdomain.local\Administrator powershell.exe

[rvazarkar]

Runas /netonly is the preferred way.

We've added the LDAPUser and LDAPPassword parameters in 2.0 as well

[webr0ck]

Runas /netonly is the preferred way.
--- it does not work.
work only runas /user

We've added the LDAPUser and LDAPPassword parameters in 2.0 as well

LDAPUser and LDAPPassword doesn't work, if you use Sharphound at a computer(user) outside of AD.

Problem is in GetDomain:
var context = new DirectoryContext(DirectoryContextType.Domain, domainName); - Api tryed connect this your user credentials. You can see that in Wireshark.

If we use LdapUser, LdapPassword true string is:
var context = new DirectoryContext(DirectoryContextType.Domain, domainName, _options.LdapUser, _options.LdapPass);

[deveshm]

I think you have to use DirectoryContextType.DirectoryServer instead of DirectoryContextType.Domain

[0xGreen]

Was this issue ever got resolved ? i am getting the same error

Unable to contact domain example.com
LDAP connection test failed, probably can't contact domain

Tried both sharhound.exe and sharphound.ps1 from a pc outside of DC.

Anyhelp ?

[rvazarkar]

Try using the --DisableKerbSigning option

…

On Fri, Jan 17, 2020, 10:48 PM Baaz ***@***.***> wrote: Was this issue ever got resolved ? i am getting the same error Unable to contact domain example.com LDAP connection test failed, probably can't contact domain Tried both sharhound.exe and sharphound.ps1 from a pc outside of DC. Anyhelp ? — You are receiving this because you modified the open/close state. Reply to this email directly, view it on GitHub <BloodHoundAD/SharpHound#28>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ABLUS7TW45SI2HVAG6YLSVTQ6J3Y7ANCNFSM4FE62F5A> .

[surajpkhetani]

@nsrauf I resolved it by changing the DNS address to that of the target domain.