r12062: SASL negotiation now requires a gensec_security context, so that we

only try permitted mechanims.

Andrew Bartlett
(This used to be commit 0f50239dc40ee128e4985f8aec5bb5f440a4f3f0)

diff --git a/source4/libcli/ldap/ldap_bind.c b/source4/libcli/ldap/ldap_bind.c
index 81e0c8b4e6d73849f1aefb6703bbe6afce97fa1e..766416f57583bd11f78b85fe3f990574115f2f4a 100644 (file)
--- a/source4/libcli/ldap/ldap_bind.c
+++ b/source4/libcli/ldap/ldap_bind.c
@@ -223,7 +223,7 @@ NTSTATUS ldap_bind_sasl(struct ldap_connection *conn, struct cli_credentials *cr
        }
        sasl_names[i] = NULL;
        
-       mechs = gensec_security_by_sasl(tmp_ctx, sasl_names);
+       mechs = gensec_security_by_sasl(conn->gensec, tmp_ctx, sasl_names);
        if (!mechs || !mechs[0]) {
                DEBUG(1, ("None of the %d proposed SASL mechs were acceptable\n",
                          count));