summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAndrew Bartlett <abartlet@samba.org>2005-10-30 00:56:39 +0000
committerGerald (Jerry) Carter <jerry@samba.org>2007-10-10 13:45:31 -0500
commitd0831d27a5129aad85f981e9e28222c91cb4269a (patch)
tree4b2f5a907aa2a60cce13608880351d15eef8e127
parent12d4dd28a5de1bafbd982ce0043d73dd5a49c3bf (diff)
downloadsamba-d0831d27a5129aad85f981e9e28222c91cb4269a.tar.gz
samba-d0831d27a5129aad85f981e9e28222c91cb4269a.tar.bz2
samba-d0831d27a5129aad85f981e9e28222c91cb4269a.zip
r11399: Add another case where we need to fallback, if the KDC isn't there.
Andrew Bartlett (This used to be commit e82fbb58ddaa3d38615d9a2d5e804f614edb2ff3)
-rw-r--r--source4/auth/gensec/gensec_krb5.c4
1 files changed, 4 insertions, 0 deletions
diff --git a/source4/auth/gensec/gensec_krb5.c b/source4/auth/gensec/gensec_krb5.c
index 36cfc49196..a4ad3aa811 100644
--- a/source4/auth/gensec/gensec_krb5.c
+++ b/source4/auth/gensec/gensec_krb5.c
@@ -240,6 +240,10 @@ static NTSTATUS gensec_krb5_client_start(struct gensec_security *gensec_security
DEBUG(3, ("Server [%s] is not registered with our KDC: %s\n",
hostname, smb_get_krb5_error_message(gensec_krb5_state->smb_krb5_context->krb5_context, ret, gensec_krb5_state)));
return NT_STATUS_INVALID_PARAMETER; /* Make SPNEGO ignore us, we can't go any further here */
+ case KRB5_KDC_UNREACH:
+ DEBUG(3, ("Cannot reach a KDC we require to contact host [%s]: %s\n",
+ hostname, smb_get_krb5_error_message(gensec_krb5_state->smb_krb5_context->krb5_context, ret, gensec_krb5_state)));
+ return NT_STATUS_INVALID_PARAMETER; /* Make SPNEGO ignore us, we can't go any further here */
case KRB5KDC_ERR_PREAUTH_FAILED:
case KRB5KRB_AP_ERR_TKT_EXPIRED:
case KRB5_CC_END: