dsdb-repl: do not ask to add ref when doing getncchange for an exop

Reviewed-by: Andrew Bartlett <abartlet@samba.org>

diff --git a/source4/dsdb/repl/drepl_out_helpers.c b/source4/dsdb/repl/drepl_out_helpers.c
index 57205a8426014ec1d6acf58fc54a95e51e61444d..8ddce3226967428ab873edff601b8169eb7423a8 100644 (file)
--- a/source4/dsdb/repl/drepl_out_helpers.c
+++ b/source4/dsdb/repl/drepl_out_helpers.c
@@ -439,6 +439,13 @@ static void dreplsrv_op_pull_source_get_changes_trigger(struct tevent_req *req)
                        replica_flags &= ~DRSUAPI_DRS_SPECIAL_SECRET_PROCESSING;
                }
        }
+       if (state->op->extended_op != DRSUAPI_EXOP_NONE) {
+               /*
+                * If it's an exop never set the ADD_REF even if it's in
+                * repsFrom flags.
+                */
+               replica_flags &= ~DRSUAPI_DRS_ADD_REF;
+       }
 
        /* is this a full resync of all objects? */
        if (state->op->options & DRSUAPI_DRS_FULL_SYNC_NOW) {