s3:rpcclient: use GENSEC_FEATURE_NO_DELEGATION for trust credentials

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Jennifer Sutton <jennifersutton@catalyst.net.nz>

diff --git a/source3/rpcclient/rpcclient.c b/source3/rpcclient/rpcclient.c
index dea0b24976d8b700e8a9429181ff9570c592bc99..0082813c9989e4197692dc3e4920e7f52268a53c 100644 (file)
--- a/source3/rpcclient/rpcclient.c
+++ b/source3/rpcclient/rpcclient.c
@@ -1018,6 +1018,11 @@ static NTSTATUS do_cmd(struct cli_state *cli,
                                        return ntresult;
                                }
 
+                               cli_credentials_add_gensec_features(
+                                       trust_creds,
+                                       GENSEC_FEATURE_NO_DELEGATION,
+                                       CRED_SPECIFIED);
+
                                ntresult = rpccli_create_netlogon_creds_ctx(
                                        trust_creds,
                                        dc_name,