From 1eeeb76e6c5e76f69ed90274721de8fe94014a02 Mon Sep 17 00:00:00 2001
From: Stefan Metzmacher <metze@samba.org>
Date: Mon, 11 Mar 2024 17:45:43 +0100
Subject: [PATCH] s3:net_ads: use ADS_SASL_SEAL by default, so that we always
 get encryption

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
---
 source3/utils/net_ads.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/source3/utils/net_ads.c b/source3/utils/net_ads.c
index e8e6ea2ac92..5fc8a4d1f96 100644
--- a/source3/utils/net_ads.c
+++ b/source3/utils/net_ads.c
@@ -686,7 +686,7 @@ retry_connect:
 		       realm,
 		       c->opt_target_workgroup,
 		       c->opt_host,
-		       ADS_SASL_PLAIN);
+		       ADS_SASL_SEAL);
 	if (ads == NULL) {
 		return ADS_ERROR_NT(NT_STATUS_NO_MEMORY);
 	}