From 92eff41ca52858124982b7db5e30c5321a16019d Mon Sep 17 00:00:00 2001 From: Andrew Tridgell Date: Fri, 20 Nov 2009 15:19:35 +1100 Subject: s4-dsdb: some more attribuutes that we should only give if asked for --- source4/dsdb/samdb/ldb_modules/operational.c | 7 ++++++- source4/rpc_server/drsuapi/getncchanges.c | 9 ++++++++- 2 files changed, 14 insertions(+), 2 deletions(-) diff --git a/source4/dsdb/samdb/ldb_modules/operational.c b/source4/dsdb/samdb/ldb_modules/operational.c index 23d1a9fe7f..4e27157bb9 100644 --- a/source4/dsdb/samdb/ldb_modules/operational.c +++ b/source4/dsdb/samdb/ldb_modules/operational.c @@ -185,7 +185,12 @@ static const struct { enum op_remove op; } operational_remove[] = { { "ntSecurityDescriptor", OPERATIONAL_REMOVE_UNASKED }, - { "parentGUID", OPERATIONAL_REMOVE_ALWAYS } + { "parentGUID", OPERATIONAL_REMOVE_ALWAYS }, + { "replPropertyMetaData", OPERATIONAL_REMOVE_UNASKED }, + { "ntPwdHistory", OPERATIONAL_REMOVE_UNASKED }, + { "lmPwdHistory", OPERATIONAL_REMOVE_UNASKED }, + { "unicodePwd", OPERATIONAL_REMOVE_UNASKED }, + { "supplementalCredentials", OPERATIONAL_REMOVE_UNASKED } }; diff --git a/source4/rpc_server/drsuapi/getncchanges.c b/source4/rpc_server/drsuapi/getncchanges.c index 2fb3016ad3..8155bef28f 100644 --- a/source4/rpc_server/drsuapi/getncchanges.c +++ b/source4/rpc_server/drsuapi/getncchanges.c @@ -340,7 +340,14 @@ WERROR dcesrv_drsuapi_DsGetNCChanges(struct dcesrv_call_state *dce_call, TALLOC_ struct drsuapi_DsReplicaObjectListItemEx **currentObject; NTSTATUS status; DATA_BLOB session_key; - const char *attrs[] = { "*", "distinguishedName", "ntSecurityDescriptor", NULL }; + const char *attrs[] = { "*", "distinguishedName", + "ntSecurityDescriptor", + "replPropertyMetaData", + "lmPwdHistory", + "ntPwdHistory", + "supplementalCredentials", + "unicodePwd", + NULL }; WERROR werr; struct dcesrv_handle *h; struct drsuapi_bind_state *b_state; -- cgit