LDAP based password policy retrieval

[L1-0]

Please Describe The Problem To Be Solved Right now the --pass-pol command only works with the smb flag. I would like to see this feature expanded to allow enumeration based on ldap aswell. I've had situations a bunch of times now where netexec was blocked but an oldschool ldapsearch wen't through just fine. So i think this would be a nice addition.

Example ldapsearch command:

ldapsearch -x \
  -H ldap://dc.domain.local \
  -D "[email protected]" -w 'Password123' \
  -b "DC=domain,DC=local" \
  "(objectClass=domainDNS)" \
  minPwdLength pwdHistoryLength maxPwdAge minPwdAge \
  lockoutThreshold lockoutDuration lockOutObservationWindow \
  forceLogoff pwdProperties

[Dfte]

That's right! The smb thing retrives the pass pol through a named pipe that actually relies on a ldap query after. So yeah we can add that as well for the ldap protocole!