Got error: 'NoneType' object has no attribute 'request'

[ly4k]

Got error: 'NoneType' object has no attribute 'request'

[ly4k]

Hello. It seems like the server dc3 doesn't have the AD CS service installed. The request command should be run against the CA server, not the DC - unless they are the same. :-)

[forensic65x]

Ok - so both the req and -ca arguments should point to the CA?

ex: certipy req 'domain/usertest:redacted@ca3' -ca ca3 -template User -debug

When I try that, I get the following error:

/usr/share/Certipy# certipy req 'domain/usertest:redacted@cs3' -ca cs3 -template User
Certipy v3.0.0 - by Oliver Lyak (ly4k)

[*] Requesting certificate
[-] Got error: RequestSessionError: code: 0x80070057 - E_INVALIDARG - One or more arguments are invalid.
[-] Use -debug to print a stacktrace

[ly4k]

Yes, but the -ca argument should contain the name of the CA. If you don't know the name of the CA, you can use the "find" command against the DC server

[forensic65x]

I know the name of the CA - its cs3.

Should the servername after the @ in the req be the CA or a DC?

[ly4k]

Is that the name of the CA server or the CA? There is a difference. After the @ you should put the CA server, and in the -ca you should put the name of the CA. They are usually different. The error you see is because the certificate template does not exist or the name of the CA is not correct

[forensic65x]

Ok. Is there a seperate command to confirm the name of the CA?

[ly4k]

The "find" command should print the name of the CAs

[forensic65x]

Thank you. Found it with certutil as well. I appreciate your help.

[ly4k]

Great. So everything worked out? :-)