s4-dsdb: some more attribuutes that we should only give if asked for

diff --git a/source4/dsdb/samdb/ldb_modules/operational.c b/source4/dsdb/samdb/ldb_modules/operational.c
index 23d1a9fe7f6fc2d8156c98d8255dad58da106d2f..4e27157bb9709572af3d7d4c5dd03be1d5a9614a 100644 (file)
--- a/source4/dsdb/samdb/ldb_modules/operational.c
+++ b/source4/dsdb/samdb/ldb_modules/operational.c
@@ -185,7 +185,12 @@ static const struct {
        enum op_remove op;
 } operational_remove[] = {
        { "ntSecurityDescriptor", OPERATIONAL_REMOVE_UNASKED },
-       { "parentGUID",           OPERATIONAL_REMOVE_ALWAYS }
+       { "parentGUID",           OPERATIONAL_REMOVE_ALWAYS },
+       { "replPropertyMetaData", OPERATIONAL_REMOVE_UNASKED },
+       { "ntPwdHistory",         OPERATIONAL_REMOVE_UNASKED },
+       { "lmPwdHistory",         OPERATIONAL_REMOVE_UNASKED },
+       { "unicodePwd",           OPERATIONAL_REMOVE_UNASKED },
+       { "supplementalCredentials", OPERATIONAL_REMOVE_UNASKED }
 };
 
 

diff --git a/source4/rpc_server/drsuapi/getncchanges.c b/source4/rpc_server/drsuapi/getncchanges.c
index 2fb3016ad3baf03e2ce5b1d0a0b72fbf7b4fa6fe..8155bef28f5ddadf94a3cd69c4911c69c3c7ec27 100644 (file)
--- a/source4/rpc_server/drsuapi/getncchanges.c
+++ b/source4/rpc_server/drsuapi/getncchanges.c
@@ -340,7 +340,14 @@ WERROR dcesrv_drsuapi_DsGetNCChanges(struct dcesrv_call_state *dce_call, TALLOC_
        struct drsuapi_DsReplicaObjectListItemEx **currentObject;
        NTSTATUS status;
        DATA_BLOB session_key;
-       const char *attrs[] = { "*", "distinguishedName", "ntSecurityDescriptor", NULL };
+       const char *attrs[] = { "*", "distinguishedName", 
+                               "ntSecurityDescriptor", 
+                               "replPropertyMetaData", 
+                               "lmPwdHistory", 
+                               "ntPwdHistory", 
+                               "supplementalCredentials", 
+                               "unicodePwd", 
+                               NULL };
        WERROR werr;
        struct dcesrv_handle *h;
        struct drsuapi_bind_state *b_state;