diff options
| author | Andrew Bartlett <abartlet@samba.org> | 2007-05-17 05:44:51 +0000 |
|---|---|---|
| committer | Gerald (Jerry) Carter <jerry@samba.org> | 2007-10-10 14:52:33 -0500 |
| commit | 1a7b2513191fc1b29ccdbf23fca693b41a0d446a (patch) | |
| tree | 8c7e79920e74951d7e62ecaa7cdd1c22febf6ab6 /source4/auth/gensec/gensec_gssapi.c | |
| parent | da9b4626bc1c91629e053c494ff4dbe753fa2144 (diff) | |
| download | samba-1a7b2513191fc1b29ccdbf23fca693b41a0d446a.tar.gz samba-1a7b2513191fc1b29ccdbf23fca693b41a0d446a.tar.bz2 samba-1a7b2513191fc1b29ccdbf23fca693b41a0d446a.zip | |
r22966: Make sure to return LOGON_FAILURE if the user's kerberos password is
incorrect.
Andrew Bartlett
(This used to be commit 9dc6f36e43170bc5bf4f94d893b5a3689460d237)
Diffstat (limited to 'source4/auth/gensec/gensec_gssapi.c')
| -rw-r--r-- | source4/auth/gensec/gensec_gssapi.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/source4/auth/gensec/gensec_gssapi.c b/source4/auth/gensec/gensec_gssapi.c index 86e988e4cb..4dd5905480 100644 --- a/source4/auth/gensec/gensec_gssapi.c +++ b/source4/auth/gensec/gensec_gssapi.c @@ -347,6 +347,8 @@ static NTSTATUS gensec_gssapi_client_start(struct gensec_security *gensec_securi switch (ret) { case 0: break; + case KRB5KDC_ERR_PREAUTH_FAILED: + return NT_STATUS_LOGON_FAILURE; case KRB5_KDC_UNREACH: DEBUG(3, ("Cannot reach a KDC we require to contact %s\n", principal)); return NT_STATUS_INVALID_PARAMETER; /* Make SPNEGO ignore us, we can't go any further here */ |