rpcclient: Use DCERPC_AUTH_LEVEL_CONNECT if no sign/seal is set for krb5 auth

diff --git a/source3/rpcclient/rpcclient.c b/source3/rpcclient/rpcclient.c
index 1ab3ac07f607480802f2f54cfc3eba96ff6fbb36..f5f1f01df65b436fdf5bc51b81f34d6d3fd3d1d1 100644 (file)
--- a/source3/rpcclient/rpcclient.c
+++ b/source3/rpcclient/rpcclient.c
@@ -1014,6 +1014,12 @@ out_free:
                }
        }
        if (binding->flags & DCERPC_AUTH_KRB5) {
+               /* If neither Integrity or Privacy are requested then
+                * Use just Connect level */
+               if (pipe_default_auth_level == DCERPC_AUTH_LEVEL_NONE) {
+                       pipe_default_auth_level = DCERPC_AUTH_LEVEL_CONNECT;
+               }
+
                if (pipe_default_auth_type == DCERPC_AUTH_TYPE_SPNEGO) {
                        pipe_default_auth_spnego_type = PIPE_AUTH_TYPE_SPNEGO_KRB5;
                } else {