Skip to content

Commit ecb3d0e

Browse files
committed
add DisabledExtensions CA regsitry value
1 parent 45f843c commit ecb3d0e

1 file changed

Lines changed: 4 additions & 0 deletions

File tree

src/Runtime/ObjectProcessors.cs

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -722,6 +722,7 @@ await compStatusChannel.Writer.WriteAsync(new CSVComputerStatus
722722
var enrollmentAgentRestrictionsCollected = false;
723723
var isUserSpecifiesSanEnabledCollected = false;
724724
var roleSeparationEnabledCollected = false;
725+
var disabledExtensionsCollected = false;
725726
var caName = entry.GetProperty(LDAPProperties.Name);
726727
var dnsHostName = entry.GetProperty(LDAPProperties.DNSHostName);
727728
if (caName != null && dnsHostName != null) {
@@ -744,6 +745,7 @@ await compStatusChannel.Writer.WriteAsync(new CSVComputerStatus
744745
EnrollmentAgentRestrictions = await _certAbuseProcessor.ProcessEAPermissions(caName,
745746
resolvedSearchResult.Domain, dnsHostName, ret.HostingComputer),
746747
RoleSeparationEnabled = _certAbuseProcessor.RoleSeparationEnabled(dnsHostName, caName),
748+
DisabledExtensions = _certAbuseProcessor.DisabledExtensions(dnsHostName, caName),
747749

748750
// The CASecurity exist in the AD object DACL and in registry of the CA server. We prefer to use the values from registry as they are the ground truth.
749751
// If changes are made on the CA server, registry and the AD object is updated. If changes are made directly on the AD object, the CA server registry is not updated.
@@ -755,6 +757,7 @@ await compStatusChannel.Writer.WriteAsync(new CSVComputerStatus
755757
enrollmentAgentRestrictionsCollected = cARegistryData.EnrollmentAgentRestrictions.Collected;
756758
isUserSpecifiesSanEnabledCollected = cARegistryData.IsUserSpecifiesSanEnabled.Collected;
757759
roleSeparationEnabledCollected = cARegistryData.RoleSeparationEnabled.Collected;
760+
disabledExtensionsCollected = cARegistryData.DisabledExtensions.Collected;
758761
ret.CARegistryData = cARegistryData;
759762
} else {
760763
_log.LogWarning("The CA name or dnsHostname properties are null.");
@@ -764,6 +767,7 @@ await compStatusChannel.Writer.WriteAsync(new CSVComputerStatus
764767
ret.Properties.Add("enrollmentagentrestrictionscollected", enrollmentAgentRestrictionsCollected);
765768
ret.Properties.Add("isuserspecifiessanenabledcollected", isUserSpecifiesSanEnabledCollected);
766769
ret.Properties.Add("roleseparationenabledcollected", roleSeparationEnabledCollected);
770+
ret.Properties.Add("disabledextensionscollected", disabledExtensionsCollected);
767771
}
768772

769773
return ret;

0 commit comments

Comments
 (0)