s4:kdc: also fetch msDS-[In|E]gressClaimsTransformationPolicy

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>

diff --git a/source4/kdc/db-glue.c b/source4/kdc/db-glue.c
index f2e1c993bd5c7ff48ac588ae7130d10c46ded0a3..1f8574e9ef5c8d18bfb0bb6a7fd09a6cfc43a9be 100644 (file)
--- a/source4/kdc/db-glue.c
+++ b/source4/kdc/db-glue.c
@@ -68,7 +68,7 @@ enum trust_direction {
        OUTBOUND = LSA_TRUST_DIRECTION_OUTBOUND
 };
 
-static const char *trust_attrs[] = {
+static const char * const trust_attrs[] = {
        "securityIdentifier",
        "flatName",
        "trustPartner",
@@ -80,6 +80,8 @@ static const char *trust_attrs[] = {
        "trustAuthOutgoing",
        "whenCreated",
        "msDS-SupportedEncryptionTypes",
+       "msDS-IngressClaimsTransformationPolicy",
+       "msDS-EgressClaimsTransformationPolicy",
        NULL
 };