From: Stefan Metzmacher <metze@samba.org>
Date: Wed, 27 Nov 2024 09:59:58 +0000 (+0100)
Subject: s3:libnet_join: use GENSEC_FEATURE_NO_DELEGATION for trust credentials
X-Git-Tag: tdb-1.4.13~179
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b99f03eec2a0eb3601c88b9c10d696e19513ca81;p=thirdparty%2Fsamba.git

s3:libnet_join: use GENSEC_FEATURE_NO_DELEGATION for trust credentials

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Jennifer Sutton <jennifersutton@catalyst.net.nz>
---

diff --git a/source3/libnet/libnet_join.c b/source3/libnet/libnet_join.c
index fb5dfa33c90..23c3d50f2f6 100644
--- a/source3/libnet/libnet_join.c
+++ b/source3/libnet/libnet_join.c
@@ -43,6 +43,7 @@
 #include "lib/param/loadparm.h"
 #include "libcli/auth/netlogon_creds_cli.h"
 #include "auth/credentials/credentials.h"
+#include "auth/gensec/gensec.h"
 #include "libsmb/dsgetdcname.h"
 #include "rpc_client/util_netlogon.h"
 #include "libnet/libnet_join_offline.h"
@@ -1220,6 +1221,10 @@ static NTSTATUS libnet_join_joindomain_rpc_unsecure(TALLOC_CTX *mem_ctx,
 				     r->in.passed_machine_password,
 				     CRED_SPECIFIED);
 
+	cli_credentials_add_gensec_features(cli_creds,
+					    GENSEC_FEATURE_NO_DELEGATION,
+					    CRED_SPECIFIED);
+
 	remote_sockaddr = smbXcli_conn_remote_sockaddr(cli->conn);
 
 	status = rpccli_create_netlogon_creds_ctx(cli_creds,
@@ -1660,6 +1665,10 @@ NTSTATUS libnet_join_ok(struct messaging_context *msg_ctx,
 					   kerberos_state,
 					   CRED_SPECIFIED);
 
+	cli_credentials_add_gensec_features(cli_creds,
+					    GENSEC_FEATURE_NO_DELEGATION,
+					    CRED_SPECIFIED);
+
 	status = cli_full_connection_creds(frame,
 					   &cli,
 					   NULL,