s3:rpcclient: try to use NETLOGON_NEG_SUPPORTS_AES

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

diff --git a/source3/rpcclient/cmd_netlogon.c b/source3/rpcclient/cmd_netlogon.c
index 01d6da45ddca5856649a8d573d12eba43d1b0f23..d92434b23c7143f4e397e7104c5c054de3b7e884 100644 (file)
--- a/source3/rpcclient/cmd_netlogon.c
+++ b/source3/rpcclient/cmd_netlogon.c
@@ -1120,7 +1120,8 @@ static NTSTATUS cmd_netlogon_database_redo(struct rpc_pipe_client *cli,
        NTSTATUS status = NT_STATUS_UNSUCCESSFUL;
        NTSTATUS result;
        const char *server_name = cli->desthost;
-       uint32_t neg_flags = NETLOGON_NEG_AUTH2_ADS_FLAGS;
+       uint32_t neg_flags = NETLOGON_NEG_AUTH2_ADS_FLAGS |
+                               NETLOGON_NEG_SUPPORTS_AES;
        struct netr_Authenticator clnt_creds, srv_cred;
        struct netr_DELTA_ENUM_ARRAY *delta_enum_array = NULL;
        unsigned char trust_passwd_hash[16];

diff --git a/source3/rpcclient/rpcclient.c b/source3/rpcclient/rpcclient.c
index 9bf296ecc567dc82b6b4d2633cd12a7ca9dd5b6c..cb7b70f74e2c3a305ff66e3b3a95c7c66ad4e90e 100644 (file)
--- a/source3/rpcclient/rpcclient.c
+++ b/source3/rpcclient/rpcclient.c
@@ -758,7 +758,8 @@ static NTSTATUS do_cmd(struct cli_state *cli,
 
                if (ndr_syntax_id_equal(&cmd_entry->table->syntax_id,
                                        &ndr_table_netlogon.syntax_id)) {
-                       uint32_t neg_flags = NETLOGON_NEG_AUTH2_ADS_FLAGS;
+                       uint32_t neg_flags = NETLOGON_NEG_AUTH2_ADS_FLAGS |
+                                               NETLOGON_NEG_SUPPORTS_AES;
                        enum netr_SchannelType sec_channel_type;
                        uchar trust_password[16];
                        const char *machine_account;