From: Stefan Metzmacher <metze@samba.org>
Date: Wed, 27 Nov 2024 09:59:58 +0000 (+0100)
Subject: s3:rpcclient: use GENSEC_FEATURE_NO_DELEGATION for trust credentials
X-Git-Tag: tdb-1.4.13~178
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=3abece600f9c944bb4bd061fe4062370a6e08080;p=thirdparty%2Fsamba.git

s3:rpcclient: use GENSEC_FEATURE_NO_DELEGATION for trust credentials

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Jennifer Sutton <jennifersutton@catalyst.net.nz>
---

diff --git a/source3/rpcclient/rpcclient.c b/source3/rpcclient/rpcclient.c
index dea0b24976d..0082813c998 100644
--- a/source3/rpcclient/rpcclient.c
+++ b/source3/rpcclient/rpcclient.c
@@ -1018,6 +1018,11 @@ static NTSTATUS do_cmd(struct cli_state *cli,
 					return ntresult;
 				}
 
+				cli_credentials_add_gensec_features(
+					trust_creds,
+					GENSEC_FEATURE_NO_DELEGATION,
+					CRED_SPECIFIED);
+
 				ntresult = rpccli_create_netlogon_creds_ctx(
 					trust_creds,
 					dc_name,