From d9f97cd57f9f797c25212f2fc2d9791733a24ca0 Mon Sep 17 00:00:00 2001
From: Matthias Dieter Wallnöfer <mdw@samba.org>
Date: Sat, 20 Nov 2010 21:15:57 +0100
Subject: s4:objectclass_attrs LDB module - add more delete protected
 attributes

And enhance the testsuite
---
 source4/dsdb/samdb/ldb_modules/objectclass_attrs.c | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

(limited to 'source4/dsdb/samdb/ldb_modules/objectclass_attrs.c')

diff --git a/source4/dsdb/samdb/ldb_modules/objectclass_attrs.c b/source4/dsdb/samdb/ldb_modules/objectclass_attrs.c
index 67d11b302d..ba1f7abad1 100644
--- a/source4/dsdb/samdb/ldb_modules/objectclass_attrs.c
+++ b/source4/dsdb/samdb/ldb_modules/objectclass_attrs.c
@@ -203,7 +203,10 @@ static int attr_handler2(struct oc_context *ac)
 	/* There exists a hardcoded delete-protected attributes list in AD */
 	const char *del_prot_attributes[] = { "nTSecurityDescriptor",
 		"objectSid", "sAMAccountType", "sAMAccountName", "groupType",
-		"primaryGroupID", "userAccountControl", NULL }, **l;
+		"primaryGroupID", "userAccountControl", "accountExpires",
+		"badPasswordTime", "badPwdCount", "codePage", "countryCode",
+		"lastLogoff", "lastLogon", "logonCount", "pwdLastSet", NULL },
+		**l;
 	const struct dsdb_attribute *attr;
 	unsigned int i;
 	bool found;
-- 
cgit