set netlogon negotiation flags to 0x1ff, not to what the client requests.

this is 0x4000 01ff on NT4 SP4, and 0x0000 01ff on pre-NT4 SP4.
(This used to be commit 59cf9c00d91f9706d58c3d3000842eccb9d272fc)

3 files changed, 24 insertions, 19 deletions

diff --git a/source3/lsarpcd/srv_lsa.c b/source3/lsarpcd/srv_lsa.c
index b813301dda..8f22f8f574 100644
--- a/source3/lsarpcd/srv_lsa.c
+++ b/source3/lsarpcd/srv_lsa.c
@@ -478,15 +478,16 @@ static void api_lsa_lookup_names( uint16 vuid, prs_struct *data,
 	{
 		fstring user_name;
 		fstrcpy(user_name, unistr2(q_l.lookup_name[i].str.buffer));
-        /*
-         * Map to the UNIX username.
-         */
-        map_username(user_name);
-
-        /*
-         * Do any case conversions.
-         */
-        (void)Get_Pwnam(user_name, True);
+
+		/*
+		 * Map to the UNIX username.
+		 */
+		map_username(user_name);
+
+		/*
+		 * Do any case conversions.
+		 */
+		(void)Get_Pwnam(user_name, True);
 
 		if (!pdb_name_to_rid(user_name, &dom_rids[i], &dummy_g_rid))
 		{
diff --git a/source3/rpc_server/srv_lsa.c b/source3/rpc_server/srv_lsa.c
index b813301dda..8f22f8f574 100644
--- a/source3/rpc_server/srv_lsa.c
+++ b/source3/rpc_server/srv_lsa.c
@@ -478,15 +478,16 @@ static void api_lsa_lookup_names( uint16 vuid, prs_struct *data,
 	{
 		fstring user_name;
 		fstrcpy(user_name, unistr2(q_l.lookup_name[i].str.buffer));
-        /*
-         * Map to the UNIX username.
-         */
-        map_username(user_name);
-
-        /*
-         * Do any case conversions.
-         */
-        (void)Get_Pwnam(user_name, True);
+
+		/*
+		 * Map to the UNIX username.
+		 */
+		map_username(user_name);
+
+		/*
+		 * Do any case conversions.
+		 */
+		(void)Get_Pwnam(user_name, True);
 
 		if (!pdb_name_to_rid(user_name, &dom_rids[i], &dummy_g_rid))
 		{
diff --git a/source3/rpc_server/srv_netlog.c b/source3/rpc_server/srv_netlog.c
index 4228eab3e0..de3eaf9bd9 100644
--- a/source3/rpc_server/srv_netlog.c
+++ b/source3/rpc_server/srv_netlog.c
@@ -126,10 +126,13 @@ static void net_reply_auth_2(NET_Q_AUTH_2 *q_a, prs_struct *rdata,
 				DOM_CHAL *resp_cred, int status)
 {
 	NET_R_AUTH_2 r_a;
+	NEG_FLAGS srv_flgs;
+
+	srv_flgs.neg_flags = 0x000001ff;
 
 	/* set up the LSA AUTH 2 response */
 
-	make_net_r_auth_2(&r_a, resp_cred, &(q_a->clnt_flgs), status);
+	make_net_r_auth_2(&r_a, resp_cred, &srv_flgs, status);
 
 	/* store the response in the SMB stream */
 	net_io_r_auth_2("", &r_a, rdata, 0);