s4-rodc: don't set SPECIAL_SECRET_PROCESSING on EXOP_REPL_SECRET

otherwise we don't get the secrets!

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>

diff --git a/source4/dsdb/repl/drepl_out_helpers.c b/source4/dsdb/repl/drepl_out_helpers.c
index 2a32e5ca04f5771eaaef2ff1ae01dbbe7b459b9f..f83cdda56d370ccf75cc8abf47457493a503ee03 100644 (file)
--- a/source4/dsdb/repl/drepl_out_helpers.c
+++ b/source4/dsdb/repl/drepl_out_helpers.c
@@ -384,6 +384,9 @@ static void dreplsrv_op_pull_source_get_changes_trigger(struct tevent_req *req)
                        DEBUG(0,(__location__ ": Failed to construct partial attribute set : %s\n", nt_errstr(status)));
                        return;
                }
+               if (state->op->extended_op == DRSUAPI_EXOP_REPL_SECRET) {
+                       replica_flags &= ~DRSUAPI_DRS_SPECIAL_SECRET_PROCESSING;
+               }
        }
 
        r->in.bind_handle       = &drsuapi->bind_handle;