- if (state->creds->negotiate_flags !=
- state->r.out.capabilities->server_capabilities) {
- DEBUG(0, ("The client capabilities don't match the server "
- "capabilities: local[0x%08X] remote[0x%08X]\n",
- state->creds->negotiate_flags,
- state->capabilities.server_capabilities));
+ if (!(state->creds->negotiate_flags & NETLOGON_NEG_SUPPORTS_AES)) {
+ DEBUG(0, ("netr_LogonGetCapabilities is supported by %s, "
+ "but AES was not negotiated - downgrade detected",
+ state->cli->desthost));