From b392116c1f85faa365e714bc442447513557d768 Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Thu, 22 Oct 2009 18:21:50 +1100 Subject: s4:secrets Look for LDAP secret with a name that is indexed This avoids a very common unindexed lookup --- source4/param/secrets.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'source4/param') diff --git a/source4/param/secrets.h b/source4/param/secrets.h index 743cf684a9..caffa50733 100644 --- a/source4/param/secrets.h +++ b/source4/param/secrets.h @@ -26,7 +26,7 @@ #define SECRETS_PRIMARY_REALM_FILTER "(&(realm=%s)(objectclass=primaryDomain))" #define SECRETS_KRBTGT_SEARCH "(&((|(realm=%s)(flatname=%s))(samAccountName=krbtgt)))" #define SECRETS_PRINCIPAL_SEARCH "(&(|(realm=%s)(flatname=%s))(servicePrincipalName=%s))" -#define SECRETS_LDAP_FILTER "(objectclass=ldapSecret)" +#define SECRETS_LDAP_FILTER "(&(objectclass=ldapSecret)(cn=SAMDB Credentials))" /** * Use a TDB to store an incrementing random seed. -- cgit