s4:rpc_server/netlogon: let dcesrv_netr_LogonSamLogon_base_reply handle encryption...

This might be the better option when we implement
netr_ServerAuthenticateKerberos().

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>

diff --git a/source4/rpc_server/netlogon/dcerpc_netlogon.c b/source4/rpc_server/netlogon/dcerpc_netlogon.c
index 3a75e0468390f8482887f4a1364ab5723a6a49ec..5c7ac435a1c7f0d4eeaa3d953868f1e37e4ceb6a 100644 (file)
--- a/source4/rpc_server/netlogon/dcerpc_netlogon.c
+++ b/source4/rpc_server/netlogon/dcerpc_netlogon.c
@@ -1704,6 +1704,12 @@ static void dcesrv_netr_LogonSamLogon_base_reply(
                        DBG_ERR("netlogon_creds_encrypt_samlogon_validation() "
                                "failed - %s\n",
                                nt_errstr(status));
+                       if (r->out.validation != NULL) {
+                               ZERO_STRUCTP(r->out.validation);
+                       }
+                       *r->out.authoritative = true;
+                       *r->out.flags = 0;
+                       r->out.result = status;
                }
        }