source4 rpc: binding.c enable DCERPC_SCHANNEL_AUTO for schannel connections

Enable the DCERPC_SCHANNEL_AUTO option in dceprc bindings. If not enabled
calls to netlogon.netlogon from python fail with NT_STATUS_DOWNGRADE_DETECTED
if schannel bindings are specified.

Signed-off-by: Gary Lockyer <gary@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Pair-programmed-with: Garming Sam <garming@catalyst.net.nz>

diff --git a/librpc/rpc/binding.c b/librpc/rpc/binding.c
index 51f89ccf863cbb0c1963e9e6ca7266d268ca875f..63ba682a577e88be16ce5aa2af742262ef57b98d 100644 (file)
--- a/librpc/rpc/binding.c
+++ b/librpc/rpc/binding.c
@@ -98,7 +98,7 @@ static const struct ncacn_option {
        {"spnego", DCERPC_AUTH_SPNEGO},
        {"ntlm", DCERPC_AUTH_NTLM},
        {"krb5", DCERPC_AUTH_KRB5},
-       {"schannel", DCERPC_SCHANNEL},
+       {"schannel", DCERPC_SCHANNEL | DCERPC_SCHANNEL_AUTO},
        {"validate", DCERPC_DEBUG_VALIDATE_BOTH},
        {"print", DCERPC_DEBUG_PRINT_BOTH},
        {"padcheck", DCERPC_DEBUG_PAD_CHECK},

diff --git a/selftest/flapping b/selftest/flapping
index e40a2ab2d4d7712d1a42ae49437ec40d9cfbbb62..50fdf1ed972498f6bf9a45868b4b5ed59b31b78e 100644 (file)
--- a/selftest/flapping
+++ b/selftest/flapping
@@ -34,4 +34,3 @@
 ^samba3.blackbox.smbclient_tar.* # fails very, very often on sn-devel
 ^samba3.blackbox.smbclient_s3.*.sending a message to the remote server # flakey on sn-devel-104 and sn-devel-144
 ^samba3.blackbox.smbclient_s3.*.creating a good symlink and deleting it by path # flakey on sn-devel-104 and sn-devel-144
-^samba.tests.auth_log_samlogon