From 395b8e4d58e2815d9848f8a6390f23d8c7d10a91 Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Wed, 29 Aug 2012 11:29:44 +1000 Subject: lib/ldb: Avoid printing secret attributes in ldb trace logs These are printed when Samba has debug level 10, which is often used for debugging. Instead, print a note to say that this attribute has been skipped. Andrew Bartlett --- lib/ldb/include/ldb_module.h | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'lib/ldb/include/ldb_module.h') diff --git a/lib/ldb/include/ldb_module.h b/lib/ldb/include/ldb_module.h index 6e14f4c3e8..be50c09210 100644 --- a/lib/ldb/include/ldb_module.h +++ b/lib/ldb/include/ldb_module.h @@ -55,6 +55,10 @@ struct ldb_module; /* an extended match rule that always fails to match */ #define SAMBA_LDAP_MATCH_ALWAYS_FALSE "1.3.6.1.4.1.7165.4.5.1" +/* The const char * const * pointer to a list of secret (password) + * attributes, not to be printed in trace messages */ +#define LDB_SECRET_ATTRIBUTE_LIST_OPAQUE "LDB_SECRET_ATTRIBUTE_LIST" + /* these function pointers define the operations that a ldb module can intercept */ -- cgit