From: Stefan Metzmacher <metze@samba.org>
Date: Wed, 30 Oct 2024 11:13:36 +0000 (+0100)
Subject: s3:cli_netlogon: use GENSEC_FEATURE_NO_DELEGATION for trust credentials
X-Git-Tag: tdb-1.4.13~180
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f14493d086fcdb3919e2abf4113c9778bb9f690e;p=thirdparty%2Fsamba.git

s3:cli_netlogon: use GENSEC_FEATURE_NO_DELEGATION for trust credentials

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Jennifer Sutton <jennifersutton@catalyst.net.nz>
---

diff --git a/source3/rpc_client/cli_pipe_schannel.c b/source3/rpc_client/cli_pipe_schannel.c
index a8f8bf4cef4..666cfbbf980 100644
--- a/source3/rpc_client/cli_pipe_schannel.c
+++ b/source3/rpc_client/cli_pipe_schannel.c
@@ -28,6 +28,7 @@
 #include "libsmb/libsmb.h"
 #include "../libcli/smb/smbXcli_base.h"
 #include "libcli/auth/netlogon_creds_cli.h"
+#include "auth/gensec/gensec.h"
 
 #undef DBGC_CLASS
 #define DBGC_CLASS DBGC_RPC_CLI
@@ -63,6 +64,10 @@ NTSTATUS cli_rpc_pipe_open_schannel(struct cli_state *cli,
 		return status;
 	}
 
+	cli_credentials_add_gensec_features(cli_creds,
+					    GENSEC_FEATURE_NO_DELEGATION,
+					    CRED_SPECIFIED);
+
 	status = rpccli_create_netlogon_creds_ctx(cli_creds,
 						  remote_name,
 						  msg_ctx,