s3:cli_netlogon: use GENSEC_FEATURE_NO_DELEGATION for trust credentials

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Jennifer Sutton <jennifersutton@catalyst.net.nz>

diff --git a/source3/rpc_client/cli_pipe_schannel.c b/source3/rpc_client/cli_pipe_schannel.c
index a8f8bf4cef485c5a719acc63d9a9a25fb040d17c..666cfbbf980c0cddeb6f403b7d1212d68daa1ed3 100644 (file)
--- a/source3/rpc_client/cli_pipe_schannel.c
+++ b/source3/rpc_client/cli_pipe_schannel.c
@@ -28,6 +28,7 @@
 #include "libsmb/libsmb.h"
 #include "../libcli/smb/smbXcli_base.h"
 #include "libcli/auth/netlogon_creds_cli.h"
+#include "auth/gensec/gensec.h"
 
 #undef DBGC_CLASS
 #define DBGC_CLASS DBGC_RPC_CLI
@@ -63,6 +64,10 @@ NTSTATUS cli_rpc_pipe_open_schannel(struct cli_state *cli,
                return status;
        }
 
+       cli_credentials_add_gensec_features(cli_creds,
+                                           GENSEC_FEATURE_NO_DELEGATION,
+                                           CRED_SPECIFIED);
+
        status = rpccli_create_netlogon_creds_ctx(cli_creds,
                                                  remote_name,
                                                  msg_ctx,