s4:dsdb/common: add pekList and msDS-ExecuteScriptPassword to DSDB_SECRET_ATTRIBUTES_EX

See [MS-ADTS] 3.1.1.4.4 Extended Access Checks.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Michael Adam <obnox@samba.org>

diff --git a/source4/dsdb/common/util.h b/source4/dsdb/common/util.h
index c16ce81c2c3309d6f48cf4578f16177bed7985b3..0f9b442130d4422c48add5f2277a766682f5a857 100644 (file)
--- a/source4/dsdb/common/util.h
+++ b/source4/dsdb/common/util.h
@@ -46,6 +46,8 @@
 bool is_attr_in_list(const char * const * attrs, const char *attr);
 
 #define DSDB_SECRET_ATTRIBUTES_EX(sep) \
+       "pekList" sep \
+       "msDS-ExecuteScriptPassword" sep \
        "currentValue" sep \
        "dBCSPwd" sep \
        "initialAuthIncoming" sep \