{"id":888,"date":"2012-03-01T17:39:09","date_gmt":"2012-03-01T16:39:09","guid":{"rendered":"http:\/\/blogs.chrisse.se\/?p=888"},"modified":"2023-06-06T17:04:00","modified_gmt":"2023-06-06T15:04:00","slug":"windows-server-8-beta-and-dumpreferences","status":"publish","type":"post","link":"https:\/\/blog.chrisse.se\/?p=888","title":{"rendered":"Windows Server 8 Beta and dumpReferences"},"content":{"rendered":"\n<p>Yesterday when I was researching the new Windows Server 8 Beta bits I did a discovery of a new operational attribute [1] &#8211; dumpReferences (that I haven&#8217;t seen documented anywhere)<\/p>\n\n\n\n<p>So what does &#8220;dumpReferences&#8221; really do? It works similar to the &#8220;dumpDatabase&#8221; operational attribute, but instead it finds all none-linked (simple) references to a given objects [2] DNT (Distinguee Name Tag)<\/p>\n\n\n\n<p><span style=\"font-size: 10pt;\"><em>[1] List of operational attributes in previous Windows Server releases: <a href=\"http:\/\/msdn.microsoft.com\/en-us\/library\/cc223297(v=prot.10).aspx\">http:\/\/msdn.microsoft.com\/en-us\/library\/cc223297(v=prot.10).aspx<\/a>.<br><\/em><\/span><\/p>\n\n\n\n<p><span style=\"font-size: 10pt;\"><em>[2] If you want to know how DNTs work have a look at: <a href=\"http:\/\/blogs.chrisse.se\/2012\/02\/15\/how-the-active-directory-data-store-really-works-inside-ntds-dit-part-2\">http:\/\/blogs.chrisse.se\/2012\/02\/15\/how-the-active-directory-data-store-really-works-inside-ntds-dit-part-2<\/a><br><\/em><\/span><\/p>\n\n\n\n<p><strong>So how do you play with this?<br><\/strong><\/p>\n\n\n\n<p><span style=\"font-family: Franklin Gothic Demi; font-size: 10pt;\">Table&nbsp;1: dumpReferences<br><\/span><\/p>\n\n\n\n<div style=\"margin-left: 77pt;\">\n<table style=\"border-collapse: collapse;\" border=\"0\"><colgroup> <col style=\"width: 638px;\"><\/colgroup>\n<tbody valign=\"top\">\n<tr style=\"background: #d9d9d9;\">\n<td style=\"padding-left: 7px; padding-right: 7px; border-top: solid gray 1.5pt; border-left: solid gray 1.5pt; border-bottom: solid gray 0.5pt; border-right: solid gray 1.5pt;\" valign=\"middle\">\n<p style=\"text-align: center;\"><span style=\"font-family: Franklin Gothic Demi Cond; font-size: 9pt;\">LDIF Sample<\/span>&nbsp;<\/p>\n<\/td>\n<\/tr>\n<tr style=\"height: 29px;\">\n<td style=\"padding-left: 7px; padding-right: 7px; border-top: none; border-left: solid gray 1.5pt; border-bottom: solid gray 1.5pt; border-right: solid gray 1.5pt;\">\n<p><span style=\"font-family: Arial; font-size: 9pt;\">dn:<br><\/span><\/p>\n<p><span style=\"font-family: Arial; font-size: 9pt;\">changetype: modify<br><\/span><\/p>\n<p><span style=\"font-family: Arial; font-size: 9pt;\">add: dumpReferences<br><\/span><\/p>\n<p><span style=\"font-family: Arial; font-size: 9pt;\">dumpReferences:&lt;DN to dump references of&gt;<\/span><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n\n\n\n<p><strong>Let&#8217;s try an example<\/strong><br>We create two users with the following DNs:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>CN=Lena Andersson,CN=Users,DC=wtf,DC=nttest,DC=chrisse,DC=com<\/li>\n\n\n\n<li>CN=Elina Andersson,CN=Users,DC=wtf,DC=nttest,DC=chrisse,DC=com<\/li>\n<\/ul>\n\n\n\n<p>Now set the &#8220;Se-Also&#8221; attribute on &#8220;CN= Lena Andersson,CN=Users,DC=wtf,DC=nttest,DC=chrisse,DC=com&#8221; to a value of &#8220;CN=Elina Andersson,CN=Users,DC=wtf,DC=nttest,DC=chrisse,DC=com&#8221;<\/p>\n\n\n\n<p>Let&#8217;s dump the references to in the DIT to &#8220;CN=Elina Andersson,CN=Users,DC=wtf,DC=nttest,DC=chrisse,DC=com&#8221; now \u2013 I choose to do this with LDP.exe<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"768\" src=\"https:\/\/blog.chrisse.se\/wp-content\/uploads\/2023\/06\/image-39-1024x768.png\" alt=\"\" class=\"wp-image-1066\" srcset=\"https:\/\/blog.chrisse.se\/wp-content\/uploads\/2023\/06\/image-39-1024x768.png 1024w, https:\/\/blog.chrisse.se\/wp-content\/uploads\/2023\/06\/image-39-300x225.png 300w, https:\/\/blog.chrisse.se\/wp-content\/uploads\/2023\/06\/image-39-768x576.png 768w, https:\/\/blog.chrisse.se\/wp-content\/uploads\/2023\/06\/image-39.png 1083w\" sizes=\"auto, (max-width: 767px) 89vw, (max-width: 1000px) 54vw, (max-width: 1071px) 543px, 580px\" \/><\/figure>\n\n\n\n<p>Now go into the path where you store [3] the NTDS.dit database on the DC you executed the above operation against and you should find a &#8220;NTDS.ref&#8221; file open it in your preferred text editor and you can know see the DNTs of all object&#8217;s refereeing to &#8220;Elina&#8221; and by which attribute.<\/p>\n\n\n\n<p>DNT: 4044 is representing the object of &#8220;Elina&#8221; itself as all objects references them self <br>DNT: 4047 is representing the object of &#8220;Lena&#8221; that is referencing &#8220;Elina&#8221; in the &#8220;see-Also&#8221; attribute<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"768\" src=\"https:\/\/blog.chrisse.se\/wp-content\/uploads\/2023\/06\/image-40-1024x768.png\" alt=\"\" class=\"wp-image-1067\" srcset=\"https:\/\/blog.chrisse.se\/wp-content\/uploads\/2023\/06\/image-40-1024x768.png 1024w, https:\/\/blog.chrisse.se\/wp-content\/uploads\/2023\/06\/image-40-300x225.png 300w, https:\/\/blog.chrisse.se\/wp-content\/uploads\/2023\/06\/image-40-768x576.png 768w, https:\/\/blog.chrisse.se\/wp-content\/uploads\/2023\/06\/image-40.png 1082w\" sizes=\"auto, (max-width: 767px) 89vw, (max-width: 1000px) 54vw, (max-width: 1071px) 543px, 580px\" \/><\/figure>\n\n\n\n<p><span style=\"font-size: 10pt;\"><em>[3] You can find the path by looking at &#8220;HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\NTDS\\Parameters\\DSA Database File&#8221;<br><\/em><\/span><\/p>\n\n\n\n<p><strong>Summary<br><\/strong>I don&#8217;t see any value of this actually and maybe this is something left in this release for development and testing purposes so it might disappear in the final release \u2013 How did I find this one? Well that qualifies for a post by its own to explain all tests I perform on a new Windows build <span style=\"font-family: Wingdings;\">J<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Yesterday when I was researching the new Windows Server 8 Beta bits I did a discovery of a new operational attribute [1] &#8211; dumpReferences (that I haven&#8217;t seen documented anywhere) So what does &#8220;dumpReferences&#8221; really do? It works similar to the &#8220;dumpDatabase&#8221; operational attribute, but instead it finds all none-linked (simple) references to a given &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/blog.chrisse.se\/?p=888\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Windows Server 8 Beta and dumpReferences&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-888","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/blog.chrisse.se\/index.php?rest_route=\/wp\/v2\/posts\/888","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.chrisse.se\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.chrisse.se\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.chrisse.se\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.chrisse.se\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=888"}],"version-history":[{"count":2,"href":"https:\/\/blog.chrisse.se\/index.php?rest_route=\/wp\/v2\/posts\/888\/revisions"}],"predecessor-version":[{"id":1068,"href":"https:\/\/blog.chrisse.se\/index.php?rest_route=\/wp\/v2\/posts\/888\/revisions\/1068"}],"wp:attachment":[{"href":"https:\/\/blog.chrisse.se\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=888"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.chrisse.se\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=888"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.chrisse.se\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=888"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}