s4:secrets Look for LDAP secret with a name that is indexed

This avoids a very common unindexed lookup

diff --git a/source4/param/secrets.h b/source4/param/secrets.h
index 743cf684a97b08084db3bbf1017acac8b108e9fb..caffa50733f9c20d8423889798d6d84cf5d8040b 100644 (file)
--- a/source4/param/secrets.h
+++ b/source4/param/secrets.h
@@ -26,7 +26,7 @@
 #define SECRETS_PRIMARY_REALM_FILTER "(&(realm=%s)(objectclass=primaryDomain))"
 #define SECRETS_KRBTGT_SEARCH "(&((|(realm=%s)(flatname=%s))(samAccountName=krbtgt)))"
 #define SECRETS_PRINCIPAL_SEARCH "(&(|(realm=%s)(flatname=%s))(servicePrincipalName=%s))"
-#define SECRETS_LDAP_FILTER "(objectclass=ldapSecret)"
+#define SECRETS_LDAP_FILTER "(&(objectclass=ldapSecret)(cn=SAMDB Credentials))"
 
 /**
  * Use a TDB to store an incrementing random seed.