s4:rpc_server/netlogon: add support for AES based netlogon schannel

metze

Signed-off-by: Günther Deschner <gd@samba.org>

diff --git a/source4/rpc_server/netlogon/dcerpc_netlogon.c b/source4/rpc_server/netlogon/dcerpc_netlogon.c
index 598b7f2c9c4078ea4f42f136fae19afea3c1628e..309601e9da60f5699a60690f789165872d580ed9 100644 (file)
--- a/source4/rpc_server/netlogon/dcerpc_netlogon.c
+++ b/source4/rpc_server/netlogon/dcerpc_netlogon.c
@@ -124,6 +124,10 @@ static NTSTATUS dcesrv_netr_ServerAuthenticate3(struct dcesrv_call_state *dce_ca
                negotiate_flags |= NETLOGON_NEG_STRONG_KEYS;
        }
 
+       if (*r->in.negotiate_flags & NETLOGON_NEG_SUPPORTS_AES) {
+               negotiate_flags |= NETLOGON_NEG_SUPPORTS_AES;
+       }
+
        /*
         * According to Microsoft (see bugid #6099)
         * Windows 7 looks at the negotiate_flags