s4-drs: we need to specifically ask for ntSecurityDescriptor

ntSecurityDescriptor is no longer included by default

diff --git a/source4/rpc_server/drsuapi/getncchanges.c b/source4/rpc_server/drsuapi/getncchanges.c
index ca404c4dd96b74220183ebbd3f5f7848334a19f1..2fb3016ad3baf03e2ce5b1d0a0b72fbf7b4fa6fe 100644 (file)
--- a/source4/rpc_server/drsuapi/getncchanges.c
+++ b/source4/rpc_server/drsuapi/getncchanges.c
@@ -340,7 +340,7 @@ WERROR dcesrv_drsuapi_DsGetNCChanges(struct dcesrv_call_state *dce_call, TALLOC_
        struct drsuapi_DsReplicaObjectListItemEx **currentObject;
        NTSTATUS status;
        DATA_BLOB session_key;
-       const char *attrs[] = { "*", "distinguishedName", NULL };
+       const char *attrs[] = { "*", "distinguishedName", "ntSecurityDescriptor", NULL };
        WERROR werr;
        struct dcesrv_handle *h;
        struct drsuapi_bind_state *b_state;