s3:net_ads: use ADS_SASL_SEAL by default, so that we always get encryption

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>

diff --git a/source3/utils/net_ads.c b/source3/utils/net_ads.c
index e8e6ea2ac92b29320dd018dd52ce16ce2bafecb1..5fc8a4d1f9662225f8082c01c2c2af1fd8016df3 100644 (file)
--- a/source3/utils/net_ads.c
+++ b/source3/utils/net_ads.c
@@ -686,7 +686,7 @@ retry_connect:
                       realm,
                       c->opt_target_workgroup,
                       c->opt_host,
-                      ADS_SASL_PLAIN);
+                      ADS_SASL_SEAL);
        if (ads == NULL) {
                return ADS_ERROR_NT(NT_STATUS_NO_MEMORY);
        }