Typo in LDAP query for P-RODCKrbtgtOrphan

[imaibou]

In the line

pingcastle/Healthcheck/HealthcheckAnalyzer.cs

Line 6056 in 2d9ab43

adws.Enumerate(domainInfo.DefaultNamingContext, "(&(objectclas=user)(!(msDS-KrbTgtLinkBl=*))(sAMAccountName=krbtgt_*)(msDS-SecondaryKrbTgtNumber=*))", properties, callback);

, there is a typo in the word "objectclas". There is an s missing. This causes the LDAP query to not return any accounts and the rule P-RODCKrbtgtOrphan will never get triggered.

[JoeDibley]

Yep. This was fixed internally for a long while now. It will be released in 3.4. Thank you for raising though :)