[ShayHanan]

Summary

• Publish Shares.get_configuration so a crawl can read the raw share configuration, including directory, access type, devices, and ACL rules.
• Publish DirectoryService.search_directory_services, a read-only searchAD lookup that returns rid and does not import accounts. fetch still calls syncAD.
• CIS-1799. The access-map crawl (CIS-1800) depends on these calls.

Test plan

• python -m unittest tests.ut.core.admin.test_shares tests.ut.core.admin.test_directory_services
• Confirm search_directory_services calls searchAD and never syncAD
• Confirm get_configuration returns the raw configuration, while get still returns ShareInfo

Made with Cursor

---

Note

Low Risk
Additive public API with refactored call sites; same Portal endpoints and semantics as before, with clearer separation between read-only search and account import.

^{Reviewed by Cursor Bugbot for commit caa0f42. Bugbot is set up for automated code reviews on this repo. Configure here.}

[ShayHanan]

Closing. The access-map spec (8d8dbde, CIS-1797) now says the crawl calls the pinned SDK's existing private methods, with no change to ctera-python-sdk. CIS-1799 is no longer needed.