+ tls_cb = ads_tls_channel_bindings(&ads->ldap_tls_data);
+ if (tls_cb != NULL) {
+ uint32_t initiator_addrtype = 0;
+ const DATA_BLOB *initiator_address = NULL;
+ uint32_t acceptor_addrtype = 0;
+ const DATA_BLOB *acceptor_address = NULL;
+ const DATA_BLOB *application_data = tls_cb;
+
+ nt_status = gensec_set_channel_bindings(auth_generic_state->gensec_security,
+ initiator_addrtype,
+ initiator_address,
+ acceptor_addrtype,
+ acceptor_address,
+ application_data);
+ if (!NT_STATUS_IS_OK(nt_status)) {
+ DBG_WARNING("Failed to set GENSEC channel bindings: %s\n",
+ nt_errstr(nt_status));
+ return ADS_ERROR_NT(nt_status);
+ }
+
+ wrap->wrap_type = ADS_SASLWRAP_TYPE_PLAIN;
+ }
+