The branch, master has been updated
       via  3dfca72 dsdb: Also redact the clearTextPassword input-only attribute
      from  097c5b1 lib: Remove parser code, now replaced with tini parser.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -----------------------------------------------------------------
commit 3dfca72dba54434725b1a66512bf5eec78da0886
Author: Andrew Bartlett <abart...@samba.org>
Date:   Fri Feb 21 15:24:24 2014 +1300

    dsdb: Also redact the clearTextPassword input-only attribute
    
    We go to a great deal of effort to avoid administrators posting their
    passwords in Samba logs, and one of the ways we do that is to remove
    them from internal ldif dumps Samba produces while operating as an AD
    DC.
    
    clearTextPassword is not a real attribute, but it functions as one for
    an input path.
    
    Change-Id: Iaacf3354fc9bfff18d6774f49b17a9ba962347d5
    Signed-off-by: Andrew Bartlett <abart...@samba.org>
    Reviewed-by: Jelmer Vernooij <jel...@samba.org>
    
    Autobuild-User(master): Andrew Bartlett <abart...@samba.org>
    Autobuild-Date(master): Sat Aug 16 01:05:07 CEST 2014 on sn-devel-104

-----------------------------------------------------------------------

Summary of changes:
 source4/dsdb/common/util.h |    3 ++-
 1 files changed, 2 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source4/dsdb/common/util.h b/source4/dsdb/common/util.h
index 0f9b442..dcf3fc4 100644
--- a/source4/dsdb/common/util.h
+++ b/source4/dsdb/common/util.h
@@ -58,7 +58,8 @@ bool is_attr_in_list(const char * const * attrs, const char 
*attr);
        "supplementalCredentials" sep \
        "trustAuthIncoming" sep \
        "trustAuthOutgoing" sep \
-       "unicodePwd"
+       "unicodePwd" sep \
+       "clearTextPassword"
 
 #define DSDB_SECRET_ATTRIBUTES_COMMA ,
 #define DSDB_SECRET_ATTRIBUTES 
DSDB_SECRET_ATTRIBUTES_EX(DSDB_SECRET_ATTRIBUTES_COMMA)


-- 
Samba Shared Repository

Reply via email to