ldaputils

var EmojiMap = map[string]string{
	"root":                     "🌳",
	"user":                     "👤",
	"computer":                 "💻️",
	"group":                    "👥",
	"organizationalUnit":       "📂",
	"container":                "📁",
	"groupOfNames":             "📇",
	"domain":                   "🌐",
	"domainDNS":                "🔗",
	"builtinDomain":            "🏠",
	"groupPolicyContainer":     "⚙️",
	"foreignSecurityPrincipal": "🌍",
	"contact":                  "📞",
	"printQueue":               "🖨️",
	"volume":                   "📦",
	"publicFolder":             "📬",
	"serviceConnectionPoint":   "🔌",
	"msExchExchangeServer":     "📧",
	"msExchStorageGroup":       "🗃️",
	"subnet":                   "🕸️",
	"site":                     "📍",
	"groupOfUniqueNames":       "📇",
	"device":                   "💻",
	"posixAccount":             "🆔",
	"organization":             "🏢",
}

var GroupTypeMap = map[int]string{
	2:           "Global Distribution Group",
	4:           "Domain Local Distribution Group",
	8:           "Universal Distribution Group",
	-2147483646: "Global Security Group",
	-2147483644: "Domain Local Security Group",
	-2147483643: "Builtin Group",
	-2147483640: "Universal Security Group",
}

var InstanceTypeMap = map[int]string{
	1:  "NamingContextHead",
	2:  "NotInstantiatedReplica",
	4:  "WritableObject",
	8:  "ParentNamingContextHeld",
	16: "FirstNamingContextConstruction",
	32: "NamingContextRemovalFromDSA",
}

var PredefinedLdapQueriesAD = map[string][]LibQuery{
	"Enum": {
		{Title: "All Organizational Units", Filter: "(objectCategory=organizationalUnit)"},
		{Title: "All Containers", Filter: "(objectCategory=container)"},
		{Title: "All Groups", Filter: "(objectCategory=group)"},
		{Title: "All Computers", Filter: "(objectClass=computer)"},
		{Title: "All Users", Filter: "(&(objectCategory=person)(objectClass=user))"},
		{Title: "All Objects", Filter: "(objectClass=*)"},
	},
	"Users": {
		{Title: "Recently Created Users", Filter: "(&(objectCategory=user)(whenCreated>=<timestamp1d>))"},
		{Title: "Users With Description", Filter: "(&(objectCategory=user)(description=*))"},
		{Title: "Users Without Email", Filter: "(&(objectCategory=user)(!(mail=*)))"},
		{Title: "Likely Service Users", Filter: "(&(objectCategory=user)(sAMAccountName=*svc*))"},
		{Title: "Disabled Users", Filter: "(&(objectCategory=user)(userAccountControl:1.2.840.113556.1.4.803:=2))"},
		{Title: "Expired Users", Filter: "(&(objectCategory=user)(accountExpires<=<timestamp>))"},
		{Title: "Users With Sensitive Infos", Filter: "(&(objectCategory=user)(|(telephoneNumber=*)(pager=*)(homePhone=*)(mobile=*)(info=*)(streetAddress=*)))"},
		{Title: "Inactive Users", Filter: "(&(objectCategory=user)(lastLogonTimestamp<=<timestamp30d>))"},
	},
	"Computers": {
		{Title: "Domain Controllers", Filter: "(&(objectCategory=computer)(userAccountControl:1.2.840.113556.1.4.803:=8192))"},
		{Title: "Non-DC Servers", Filter: "(&(objectCategory=computer)(operatingSystem=*server*)(!(userAccountControl:1.2.840.113556.1.4.803:=8192)))"},
		{Title: "Non-Server Computers", Filter: "(&(objectCategory=computer)(!(operatingSystem=*server*))(!(userAccountControl:1.2.840.113556.1.4.803:=8192)))"},
		{Title: "Stale Computers", Filter: "(&(objectCategory=computer)(!lastLogonTimestamp=*))"},
		{Title: "Computers With Outdated OS", Filter: "(&(objectCategory=computer)(|(operatingSystem=*Server 2008*)(operatingSystem=*Server 2003*)(operatingSystem=*Windows XP*)(operatingSystem=*Windows 7*)))"},
	},
	"Security": {
		{Title: "High Privilege Users", Filter: "(&(objectCategory=user)(adminCount=1))"},
		{Title: "Users With SPN", Filter: "(&(objectCategory=user)(servicePrincipalName=*))"},
		{Title: "Users With SIDHistory", Filter: "(&(objectCategory=person)(objectClass=user)(sidHistory=*))"},
		{Title: "KrbPreauth Disabled Users", Filter: "(&(objectCategory=person)(userAccountControl:1.2.840.113556.1.4.803:=4194304))"},
		{Title: "KrbPreauth Disabled Computers", Filter: "(&(objectCategory=computer)(userAccountControl:1.2.840.113556.1.4.803:=4194304))"},
		{Title: "Constrained Delegation Objects", Filter: "(msDS-AllowedToDelegateTo=*)"},
		{Title: "Unconstrained Delegation Objects", Filter: "(userAccountControl:1.2.840.113556.1.4.803:=524288)"},
		{Title: "RBCD Objects", Filter: "(msDS-AllowedToActOnBehalfOfOtherIdentity=*)"},
		{Title: "Not Trusted For Delegation", Filter: "(&(samaccountname=*)(userAccountControl:1.2.840.113556.1.4.803:=1048576))"},
		{Title: "Shadow Credentials Targets", Filter: "(msDS-KeyCredentialLink=*)"},
		{Title: "Must Change Password Users", Filter: "(&(objectCategory=person)(objectClass=user)(pwdLastSet=0)(!(useraccountcontrol:1.2.840.113556.1.4.803:=2)))"},
		{Title: "Password Never Changed Users", Filter: "(&(objectCategory=user)(pwdLastSet=0))"},
		{Title: "Never Expire Password Users", Filter: "(&(objectCategory=user)(userAccountControl:1.2.840.113556.1.4.803:=65536))"},
		{Title: "Users with PASSWD_NOTREQD", Filter: "(&(objectCategory=user)(userAccountControl:1.2.840.113556.1.4.803:=32))"},
		{Title: "LockedOut Users", Filter: "(&(objectCategory=user)(lockoutTime>=1))"},
		{Title: "Trusted Domains", Filter: "(objectClass=trustedDomain)"},
		{Title: "ADCS Enterprise CAs", Filter: "(objectClass=pKIEnrollmentService)", BaseDN: "CN=Enrollment Services,CN=Public Key Services,CN=Services,CN=Configuration,DC=domain,DC=com"},
		{Title: "ADCS Certificate Templates", Filter: "(objectClass=pKICertificateTemplate)", BaseDN: "CN=Certificate Templates,CN=Public Key Services,CN=Services,CN=Configuration,DC=domain,DC=com"},
	},
	"Group Members": {
		{Title: "Enterprise Admins", Filter: "(memberOf=CN=Enterprise Admins,CN=Users,DC=domain,DC=com)"},
		{Title: "Administrators", Filter: "(memberOf=CN=Administrators,CN=Builtin,DC=domain,DC=com)"},
		{Title: "Domain Admins", Filter: "(memberOf=CN=Domain Admins,CN=Users,DC=domain,DC=com)"},
		{Title: "Schema Admins", Filter: "(memberOf=CN=Schema Admins,CN=Users,DC=domain,DC=com)"},
		{Title: "DNS Admins", Filter: "(memberOf=CN=DnsAdmins,CN=Users,DC=domain,DC=com)"},
		{Title: "Server Operators", Filter: "(memberOf=CN=Server Operators,CN=Builtin,DC=domain,DC=com)"},
		{Title: "Backup Operators", Filter: "(memberOf=CN=Backup Operators,CN=Builtin,DC=domain,DC=com)"},
		{Title: "Account Operators", Filter: "(memberOf=CN=Account Operators,CN=Builtin,DC=domain,DC=com)"},
		{Title: "WinRMRemoteWMIUsers__", Filter: "(memberOf=CN=WinRMRemoteWMIUsers__,CN=Users,DC=domain,DC=com)"},
		{Title: "Group Policy Creator Owners", Filter: "(memberOf=CN=Group Policy Creator Owners,CN=Users,DC=domain,DC=com)"},
		{Title: "Remote Desktop Users", Filter: "(memberOf=CN=Remote Desktop Users,CN=Builtin,DC=domain,DC=com)"},
		{Title: "Remote Management Users", Filter: "(memberOf=CN=Remote Management Users,CN=Builtin,DC=domain,DC=com)"},
		{Title: "Print Operators", Filter: "(memberOf=CN=Print Operators,CN=Builtin,DC=domain,DC=com)"},
		{Title: "DHCP Administrators", Filter: "(memberOf=CN=DHCP Administrators,CN=Users,DC=domain,DC=com)"},
		{Title: "Hyper-V Administrators", Filter: "(memberOf=CN=Hyper-V Administrators,CN=Builtin,DC=domain,DC=com)"},
		{Title: "Cert Publishers", Filter: "(memberOf=CN=Cert Publishers,CN=Users,DC=domain,DC=com)"},
		{Title: "Protected Users", Filter: "(memberOf=CN=Protected Users,CN=Users,DC=domain,DC=com)"},
	},
}

var PredefinedLdapQueriesBasic = map[string][]LibQuery{
	"Enum": {
		{Title: "All Organizations", Filter: "(objectClass=organization)"},
		{Title: "All Users", Filter: "(|(objectClass=inetOrgPerson)(objectClass=posixAccount)(objectClass=person))"},
		{Title: "All Groups", Filter: "(|(objectClass=posixGroup)(objectClass=groupOfNames)(objectClass=groupOfUniqueNames))"},
		{Title: "All Computers", Filter: "(|(objectClass=ipHost)(objectClass=device))"},
		{Title: "All Organizational Units", Filter: "(objectClass=organizationalUnit)"},
		{Title: "All Organizational Roles", Filter: "(objectClass=organizationalRole)"},
		{Title: "All Sudo Roles", Filter: "(objectClass=sudoRole)"},
		{Title: "All Netgroups", Filter: "(objectClass=nisNetgroup)"},
		{Title: "All Objects", Filter: "(objectClass=*)"},
	},
	"Users": {
		{Title: "Users With Email", Filter: "(&(mail=*)(|(objectClass=inetOrgPerson)(objectClass=posixAccount)(objectClass=person)))"},
		{Title: "Users With Phone Number", Filter: "(&(telephoneNumber=*)(|(objectClass=inetOrgPerson)(objectClass=posixAccount)(objectClass=person)))"},
		{Title: "Users With Home Directory", Filter: "(&(homeDirectory=*)(|(objectClass=inetOrgPerson)(objectClass=posixAccount)(objectClass=person)))"},
		{Title: "Users With UID", Filter: "(&(uid=*)(|(objectClass=inetOrgPerson)(objectClass=posixAccount)(objectClass=person)))"},
		{Title: "Users With Password", Filter: "(userPassword=*)"},
		{Title: "Users With SSH Keys", Filter: "(sshPublicKey=*)"},
	},
	"Groups": {
		{Title: "Groups With Members (groupOfNames)", Filter: "(&(objectClass=groupOfNames)(member=*))"},
		{Title: "Groups With Members (posixGroup)", Filter: "(&(objectClass=posixGroup)(memberUid=*))"},
		{Title: "Groups With Members (groupOfUniqueNames)", Filter: "(&(objectClass=groupOfUniqueNames)(uniqueMember=*))"},
	},
}

var PwdPropertiesFlags = map[uint32]string{
	0x00000001: "PASSWORD_COMPLEX",
	0x00000002: "PASSWORD_NO_ANON_CHANGE",
	0x00000004: "PASSWORD_NO_CLEAR_CHANGE",
	0x00000008: "LOCKOUT_ADMINS",
	0x00000010: "PASSWORD_STORE_CLEARTEXT",
	0x00000020: "REFUSE_PASSWORD_CHANGE",
}

var RidMap = map[int]string{
	500: "Administrator",
	501: "Guest",
	502: "KRBTGT (Key Distribution Center Service Account)",
	512: "Domain Admins",
	513: "Domain Users",
	514: "Domain Guests",
	515: "Domain Computers",
	516: "Domain Controllers",
	517: "Cert Publishers",
	518: "Schema Admins",
	519: "Enterprise Admins",
	520: "Group Policy Creator Owners",
	526: "Key Admins",
	527: "Enterprise Key Admins",
	553: "RAS and IAS Servers",
	554: "Trusted for Delegation Computers",
	555: "Protected Users",
	572: "Cloneable Domain Controllers",
	573: "Read-only Domain Controllers",
	590: "Backup Operators",
	591: "Print Operators",
	592: "Server Operators",
	593: "Account Operators",
	594: "Replicator",
	596: "Incoming Forest Trust Builders",
	597: "Performance Monitor Users",
	598: "Performance Log Users",
	599: "Windows Authorization Access Group",
	600: "Network Configuration Operators",
	601: "Incoming Forest Trust Builders",
	606: "Cryptographic Operators",
	607: "Event Log Readers",
}

var SAMAccountTypeMap = map[int]string{
	0x00000000: "Domain Object",
	0x10000000: "Group Object",
	0x10000001: "Non-Security Group Object",
	0x30000000: "User Object",
	0x30000001: "Machine Account",
	0x20000000: "Alias Object",
	0x20000001: "Non-Security Alias Object",
	0x30000002: "Trust Account",
	0x40000000: "App Basic Group",
	0x40000001: "App Query Group",
}

var SDControlFlags = map[int]string{
	SE_DACL_AUTO_INHERIT_REQ: "SE_DACL_AUTO_INHERIT_REQ",
	SE_DACL_AUTO_INHERITED:   "SE_DACL_AUTO_INHERITED",
	SE_DACL_SACL_DEFAULTED:   "SE_DACL_SACL_DEFAULTED",
	SE_DACL_PRESENT:          "SE_DACL_PRESENT",
	SE_DACL_PROTECTED:        "SE_DACL_PROTECTED",
	SE_GROUP_DEFAULTED:       "SE_GROUP_DEFAULTED",
	SE_OWNER_DEFAULTED:       "SE_OWNER_DEFAULTED",
	SE_RM_CONTROL_VALID:      "SE_RM_CONTROL_VALID",
	SE_SACL_AUTO_INHERIT_REQ: "SE_SACL_AUTO_INHERIT_REQ",
	SE_SACL_AUTO_INHERITED:   "SE_SACL_AUTO_INHERITED",
	SE_SACL_PRESENT:          "SE_SACL_PRESENT",
	SE_SACL_PROTECTED:        "SE_SACL_PROTECTED",
	SE_SELF_RELATIVE:         "SE_SELF_RELATIVE",
}

var SearchFlagsMap = map[uint32]string{
	0x00000001: "fATTINDEX",
	0x00000002: "fPDNTATTINDEX",
	0x00000004: "fANR",
	0x00000008: "fPRESERVEONDELETE",
	0x00000010: "fCOPY",
	0x00000020: "fTUPLEINDEX",
	0x00000040: "fSUBTREEATTINDEX",
	0x00000080: "fCONFIDENTIAL",
	0x00000100: "fNEVERVALUEAUDIT",
	0x00000200: "fRODCFilteredAttribute",
	0x00000400: "fEXTENDEDLINKTRACKING",
	0x00000800: "fBASEONLY",
	0x00001000: "fPARTITIONSECRET",
}

var SystemFlags = map[uint32]string{
	0x00000001: "FLAG_ATTR_NOT_REPLICATED",
	0x00000002: "FLAG_ATTR_REQ_PARTIAL_SET_MEMBER",
	0x00000004: "FLAG_ATTR_IS_CONSTRUCTED",
	0x00000008: "FLAG_ATTR_IS_OPERATIONAL",
	0x00000010: "FLAG_SCHEMA_BASE_OBJECT",
	0x00000020: "FLAG_ATTR_IS_RDN",
	0x02000000: "FLAG_DISALLOW_MOVE_ON_DELETE",
	0x04000000: "FLAG_DOMAIN_DISALLOW_MOVE",
	0x08000000: "FLAG_DOMAIN_DISALLOW_RENAME",
	0x10000000: "FLAG_CONFIG_ALLOW_LIMITED_MOVE",
	0x20000000: "FLAG_CONFIG_ALLOW_MOVE",
	0x40000000: "FLAG_CONFIG_ALLOW_RENAME",
	0x80000000: "FLAG_DISALLOW_DELETE",
}

var TrustAttributeFlags = map[uint32]string{
	0x00000001: "NON_TRANSITIVE",
	0x00000002: "UPLEVEL_ONLY",
	0x00000004: "QUARANTINED_DOMAIN",
	0x00000008: "FOREST_TRANSITIVE",
	0x00000010: "CROSS_ORGANIZATION",
	0x00000020: "WITHIN_FOREST",
	0x00000040: "TREAT_AS_EXTERNAL",
	0x00000080: "USES_RC4_ENCRYPTION",
	0x00000200: "CROSS_ORGANIZATION_NO_TGT_DELEGATION",
	0x00000400: "PIM_TRUST",
	0x00000800: "CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION",
}

var UacFlags = map[int]flagDesc{
	UAC_SCRIPT:                         {"Script", ""},
	UAC_ACCOUNTDISABLE:                 {"Disabled", "Enabled"},
	UAC_HOMEDIR_REQUIRED:               {"HomeDirRequired", ""},
	UAC_LOCKOUT:                        {"LockedOut", ""},
	UAC_PASSWD_NOTREQD:                 {"PwdNotRequired", ""},
	UAC_PASSWD_CANT_CHANGE:             {"CannotChangePwd", ""},
	UAC_ENCRYPTED_TEXT_PWD_ALLOWED:     {"EncryptedTextPwdAllowed", ""},
	UAC_TEMP_DUPLICATE_ACCOUNT:         {"TmpDuplicateAccount", ""},
	UAC_NORMAL_ACCOUNT:                 {"NormalAccount", ""},
	UAC_INTERDOMAIN_TRUST_ACCOUNT:      {"InterdomainTrustAccount", ""},
	UAC_WORKSTATION_TRUST_ACCOUNT:      {"WorkstationTrustAccount", ""},
	UAC_SERVER_TRUST_ACCOUNT:           {"ServerTrustAccount", ""},
	UAC_DONT_EXPIRE_PASSWORD:           {"DoNotExpirePwd", ""},
	UAC_MNS_LOGON_ACCOUNT:              {"MNSLogonAccount", ""},
	UAC_SMARTCARD_REQUIRED:             {"SmartcardRequired", ""},
	UAC_TRUSTED_FOR_DELEGATION:         {"TrustedForDelegation", ""},
	UAC_NOT_DELEGATED:                  {"NotDelegated", ""},
	UAC_USE_DES_KEY_ONLY:               {"UseDESKeyOnly", ""},
	UAC_DONT_REQ_PREAUTH:               {"DoNotRequirePreauth", ""},
	UAC_PASSWORD_EXPIRED:               {"PwdExpired", "PwdNotExpired"},
	UAC_TRUSTED_TO_AUTH_FOR_DELEGATION: {"TrustedToAuthForDelegation", ""},
	UAC_PARTIAL_SECRETS_ACCOUNT:        {"PartialSecretsAccount", ""},
}

var WellKnownSIDsMap = map[string]string{
	"S-1-0-0":    "Null SID",
	"S-1-1-0":    "Everyone",
	"S-1-2-0":    "Local",
	"S-1-2-1":    "Console Logon",
	"S-1-3-0":    "Creator Owner ID",
	"S-1-3-1":    "Creator Group ID",
	"S-1-3-2":    "Creator Owner Server",
	"S-1-3-3":    "Creator Group Server",
	"S-1-3-4":    "Owner Rights",
	"S-1-4":      "Non-Unique Authority",
	"S-1-5":      "NT Authority",
	"S-1-5-80-0": "All Services",
	"S-1-5-1":    "Dialup",
	"S-1-5-113":  "Local Account",
	"S-1-5-114":  "Local account and member of Administrators group",
	"S-1-5-2":    "Network",
	"S-1-5-3":    "Batch",
	"S-1-5-4":    "Interactive",
	"S-1-5-6":    "Serivce",
	"S-1-5-7":    "Anonymous Logon",
	"S-1-5-8":    "Proxy",
	"S-1-5-9":    "Enterprise Domain Controllers",
	"S-1-5-10":   "Self",
	"S-1-5-11":   "Authenticated Users",
	"S-1-5-12":   "Restricted Code",
	"S-1-5-13":   "Terminal Server User",
	"S-1-5-14":   "Remote Interactive Logon",
	"S-1-5-15":   "This Organization",
	"S-1-5-17":   "IUSR",
	"S-1-5-18":   "SYSTEM",
	"S-1-5-19":   "NT Authority (LocalService)",
	"S-1-5-20":   "Network Service",
}