| commit | 3dfca72dba54434725b1a66512bf5eec78da0886 | |
| author | Andrew Bartlett <abartlet@samba.org> | |
| Fri, 21 Feb 2014 02:24:24 +0000 (21 15:24 +1300) | ||
| committer | Andrew Bartlett <abartlet@samba.org> | |
| Fri, 15 Aug 2014 23:05:07 +0000 (16 01:05 +0200) | ||
| tree | 1f14180b2b73584c48fb18749e7c80f560076a36 | treesnapshot (tar.gz zip) |
| parent | 097c5b15e26faaee7e861fc6c5574708bdc92b9a | commitdiff |
dsdb: Also redact the clearTextPassword input-only attribute
We go to a great deal of effort to avoid administrators posting their
passwords in Samba logs, and one of the ways we do that is to remove
them from internal ldif dumps Samba produces while operating as an AD
DC.
clearTextPassword is not a real attribute, but it functions as one for
an input path.
Change-Id: Iaacf3354fc9bfff18d6774f49b17a9ba962347d5
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Jelmer Vernooij <jelmer@samba.org>
Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Sat Aug 16 01:05:07 CEST 2014 on sn-devel-104
We go to a great deal of effort to avoid administrators posting their
passwords in Samba logs, and one of the ways we do that is to remove
them from internal ldif dumps Samba produces while operating as an AD
DC.
clearTextPassword is not a real attribute, but it functions as one for
an input path.
Change-Id: Iaacf3354fc9bfff18d6774f49b17a9ba962347d5
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Jelmer Vernooij <jelmer@samba.org>
Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Sat Aug 16 01:05:07 CEST 2014 on sn-devel-104
| source4/dsdb/common/util.h | diffblobblamehistory |