repl: Give an error if we get a secret when not expecting one

[nivanova/samba-autobuild/.git] / source4 / dsdb / repl / drepl_out_helpers.c

diff --git a/source4/dsdb/repl/drepl_out_helpers.c b/source4/dsdb/repl/drepl_out_helpers.c
index a0478813681744891464c9c5745068ae194f249a..a1e8dcbb244d8abb826ab4bac5f7b023c6384600 100644 (file)
--- a/source4/dsdb/repl/drepl_out_helpers.c
+++ b/source4/dsdb/repl/drepl_out_helpers.c
@@ -740,6 +740,9 @@ static void dreplsrv_op_pull_source_apply_changes_trigger(struct tevent_req *req
        if (state->op->options & DRSUAPI_DRS_FULL_SYNC_IN_PROGRESS) {
                dsdb_repl_flags |= DSDB_REPL_FLAG_PRIORITISE_INCOMING;
        }
+       if (state->op->options & DRSUAPI_DRS_SPECIAL_SECRET_PROCESSING) {
+               dsdb_repl_flags |= DSDB_REPL_FLAG_EXPECT_NO_SECRETS;
+       }
 
        status = dsdb_replicated_objects_convert(service->samdb,
                                                 working_schema ? working_schema : schema,