]> git.ipfire.org Git - thirdparty/samba.git/commit
dsdb:audit: log if msDS-KeyCredentialLink changed
authorDouglas Bagnall <douglas.bagnall@catalyst.net.nz>
Thu, 28 Aug 2025 05:02:34 +0000 (17:02 +1200)
committerDouglas Bagnall <dbagnall@samba.org>
Wed, 3 Sep 2025 02:13:40 +0000 (02:13 +0000)
commit139caa8adb2396e36eb195c593e91d7e37038315
tree5469a2d0c04f666b55d2d5e4294cdaec28482c48
parent0c4853fd8580413542a1a5fcc5fcb82191983689
dsdb:audit: log if msDS-KeyCredentialLink changed

As noted in the comments, by "changed" we mean "set" or "unset".
Explicitly re-setting to the current value will be logged as if it
were a change.

This follows the behaviour of the password fields.

Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Reviewed-by: Gary Lockyer <gary@catalyst.net.nz>
selftest/knownfail.d/audit_log_pass_change_kcl [deleted file]
source4/dsdb/samdb/ldb_modules/audit_log.c