From: Joe Guo <joeg@catalyst.net.nz>
Date: Wed, 18 Apr 2018 03:31:12 +0000 (+1200)
Subject: traffic_replay: set gensec features to encrypt credentials
X-Git-Tag: ldb-1.4.0~308
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=5ed1682905849f8b1971eac79fa7718aa0f07744;p=thirdparty%2Fsamba.git

traffic_replay: set gensec features to encrypt credentials

While running traffic_replay script against windows dc, it will fail
with a `LDAP_UNWILLING_TO_PERFORM` error for adding user.

Windows requires the credentials to be encrypted before sending.
`set_gensec_features` will fix it.

Signed-off-by: Joe Guo <joeg@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Garming Sam <garming@catalyst.net.nz>
---

diff --git a/script/traffic_replay b/script/traffic_replay
index 0e97d0a64af..df86115a48f 100755
--- a/script/traffic_replay
+++ b/script/traffic_replay
@@ -25,6 +25,7 @@ import shutil
 
 sys.path.insert(0, "bin/python")
 
+from samba import gensec
 from samba.emulate import traffic
 import samba.getopt as options
 
@@ -134,6 +135,7 @@ def main():
         print_err("Removing user and machine accounts")
         lp    = sambaopts.get_loadparm()
         creds = credopts.get_credentials(lp)
+        creds.set_gensec_features(creds.get_gensec_features() | gensec.FEATURE_SEAL)
         ldb   = traffic.openLdb(host, creds, lp)
         traffic.clean_up_accounts(ldb, opts.instance_id)
         exit(0)
@@ -155,6 +157,7 @@ def main():
 
     lp = sambaopts.get_loadparm()
     creds = credopts.get_credentials(lp)
+    creds.set_gensec_features(creds.get_gensec_features() | gensec.FEATURE_SEAL)
 
     domain = opts.workgroup
     if domain: