From: Bob Campbell <bobcampbell@catalyst.net.nz>
Date: Fri, 17 Feb 2017 02:51:36 +0000 (+1300)
Subject: getncchanges: Do not filter secrets by PAS in EXOP_REPL_SECRET
X-Git-Tag: tdb-1.3.13~493
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=d3576a95d478ecac53bdbe09f0c352a42066921b;p=thirdparty%2Fsamba.git

getncchanges: Do not filter secrets by PAS in EXOP_REPL_SECRET

This conforms with Windows' behaviour.

Signed-off-by: Bob Campbell <bobcampbell@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Pair-programmed-with: Garming Sam <garming@catalyst.net.nz>
---

diff --git a/source4/rpc_server/drsuapi/getncchanges.c b/source4/rpc_server/drsuapi/getncchanges.c
index efad0c9aa5e..5a5ad0cf3fa 100644
--- a/source4/rpc_server/drsuapi/getncchanges.c
+++ b/source4/rpc_server/drsuapi/getncchanges.c
@@ -340,7 +340,7 @@ static WERROR get_nc_changes_build_object(struct drsuapi_DsReplicaObjectListItem
 		}
 
 		/* filter by partial_attribute_set */
-		if (partial_attribute_set) {
+		if (partial_attribute_set && !force_attribute) {
 			uint32_t *result = NULL;
 			BINARY_ARRAY_SEARCH_V(local_pas, partial_attribute_set->num_attids, sa->attributeID_id,
 					      uint32_t_cmp, result);