The branch, master has been updated via 0158858 s3:gse: return NT_STATUS_LOGON_FAILURE instead of NT_STATUS_INTERNAL_ERROR from b7becc0 s4-rpc_server: Fix search for existing trust to actually look for the dns name
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log ----------------------------------------------------------------- commit 01588585b172a1428ca2332514250be2f99490c7 Author: Stefan Metzmacher <me...@samba.org> Date: Wed Jan 25 11:18:00 2012 +0100 s3:gse: return NT_STATUS_LOGON_FAILURE instead of NT_STATUS_INTERNAL_ERROR This matches the behavior of ads_verify_ticket(). Note that ads_verify_ticket() calls krb5_to_nt_status(), but as a server it's likely to always returns NT_STATUS_UNSUCCESSFUL. ads_verify_ticket() maps NT_STATUS_UNSUCCESSFUL to NT_STATUS_LOGON_FAILURE. metze Autobuild-User: Stefan Metzmacher <me...@samba.org> Autobuild-Date: Thu Jan 26 10:48:36 CET 2012 on sn-devel-104 ----------------------------------------------------------------------- Summary of changes: source3/librpc/crypto/gse.c | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/librpc/crypto/gse.c b/source3/librpc/crypto/gse.c index 0e664b7..ec37073 100644 --- a/source3/librpc/crypto/gse.c +++ b/source3/librpc/crypto/gse.c @@ -503,7 +503,7 @@ static NTSTATUS gse_get_server_auth_token(TALLOC_CTX *mem_ctx, status = NT_STATUS_MORE_PROCESSING_REQUIRED; break; default: - DEBUG(0, ("gss_init_sec_context failed with [%s]\n", + DEBUG(1, ("gss_init_sec_context failed with [%s]\n", gse_errstr(talloc_tos(), gss_maj, gss_min))); if (gse_ctx->gssapi_context) { @@ -512,7 +512,7 @@ static NTSTATUS gse_get_server_auth_token(TALLOC_CTX *mem_ctx, GSS_C_NO_BUFFER); } - status = NT_STATUS_INTERNAL_ERROR; + status = NT_STATUS_LOGON_FAILURE; goto done; } -- Samba Shared Repository