From 01588585b172a1428ca2332514250be2f99490c7 Mon Sep 17 00:00:00 2001 From: Stefan Metzmacher Date: Wed, 25 Jan 2012 11:18:00 +0100 Subject: s3:gse: return NT_STATUS_LOGON_FAILURE instead of NT_STATUS_INTERNAL_ERROR This matches the behavior of ads_verify_ticket(). Note that ads_verify_ticket() calls krb5_to_nt_status(), but as a server it's likely to always returns NT_STATUS_UNSUCCESSFUL. ads_verify_ticket() maps NT_STATUS_UNSUCCESSFUL to NT_STATUS_LOGON_FAILURE. metze Autobuild-User: Stefan Metzmacher Autobuild-Date: Thu Jan 26 10:48:36 CET 2012 on sn-devel-104 --- source3/librpc/crypto/gse.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'source3/librpc/crypto') diff --git a/source3/librpc/crypto/gse.c b/source3/librpc/crypto/gse.c index 0e664b78ea..ec37073014 100644 --- a/source3/librpc/crypto/gse.c +++ b/source3/librpc/crypto/gse.c @@ -503,7 +503,7 @@ static NTSTATUS gse_get_server_auth_token(TALLOC_CTX *mem_ctx, status = NT_STATUS_MORE_PROCESSING_REQUIRED; break; default: - DEBUG(0, ("gss_init_sec_context failed with [%s]\n", + DEBUG(1, ("gss_init_sec_context failed with [%s]\n", gse_errstr(talloc_tos(), gss_maj, gss_min))); if (gse_ctx->gssapi_context) { @@ -512,7 +512,7 @@ static NTSTATUS gse_get_server_auth_token(TALLOC_CTX *mem_ctx, GSS_C_NO_BUFFER); } - status = NT_STATUS_INTERNAL_ERROR; + status = NT_STATUS_LOGON_FAILURE; goto done; } -- cgit