From: Andrew Tridgell <tridge@samba.org>
Date: Fri, 20 Nov 2009 04:19:35 +0000 (+1100)
Subject: s4-dsdb: some more attribuutes that we should only give if asked for
X-Git-Tag: tdb-1.2.0~4
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=92eff41ca52858124982b7db5e30c5321a16019d;p=thirdparty%2Fsamba.git

s4-dsdb: some more attribuutes that we should only give if asked for
---

diff --git a/source4/dsdb/samdb/ldb_modules/operational.c b/source4/dsdb/samdb/ldb_modules/operational.c
index 23d1a9fe7f6..4e27157bb97 100644
--- a/source4/dsdb/samdb/ldb_modules/operational.c
+++ b/source4/dsdb/samdb/ldb_modules/operational.c
@@ -185,7 +185,12 @@ static const struct {
 	enum op_remove op;
 } operational_remove[] = {
 	{ "ntSecurityDescriptor", OPERATIONAL_REMOVE_UNASKED },
-	{ "parentGUID",           OPERATIONAL_REMOVE_ALWAYS }
+	{ "parentGUID",           OPERATIONAL_REMOVE_ALWAYS },
+	{ "replPropertyMetaData", OPERATIONAL_REMOVE_UNASKED },
+	{ "ntPwdHistory",         OPERATIONAL_REMOVE_UNASKED },
+	{ "lmPwdHistory",         OPERATIONAL_REMOVE_UNASKED },
+	{ "unicodePwd",           OPERATIONAL_REMOVE_UNASKED },
+	{ "supplementalCredentials", OPERATIONAL_REMOVE_UNASKED }
 };
 
 
diff --git a/source4/rpc_server/drsuapi/getncchanges.c b/source4/rpc_server/drsuapi/getncchanges.c
index 2fb3016ad3b..8155bef28f5 100644
--- a/source4/rpc_server/drsuapi/getncchanges.c
+++ b/source4/rpc_server/drsuapi/getncchanges.c
@@ -340,7 +340,14 @@ WERROR dcesrv_drsuapi_DsGetNCChanges(struct dcesrv_call_state *dce_call, TALLOC_
 	struct drsuapi_DsReplicaObjectListItemEx **currentObject;
 	NTSTATUS status;
 	DATA_BLOB session_key;
-	const char *attrs[] = { "*", "distinguishedName", "ntSecurityDescriptor", NULL };
+	const char *attrs[] = { "*", "distinguishedName", 
+				"ntSecurityDescriptor", 
+				"replPropertyMetaData", 
+				"lmPwdHistory", 
+				"ntPwdHistory", 
+				"supplementalCredentials", 
+				"unicodePwd", 
+				NULL };
 	WERROR werr;
 	struct dcesrv_handle *h;
 	struct drsuapi_bind_state *b_state;