From 85555742b109387f32ecc0e17c6b47681bdf8936 Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Fri, 17 Aug 2007 05:28:39 +0000 Subject: r24504: Try to return more useful error information on why a bind failed. Note that the correct return for a failed alter_context is a fault, not a bind_nak. Andrew Bartlett (This used to be commit 52cce94532edf1dd7f26e39bf3377f0077ea6792) --- source4/auth/gensec/schannel.c | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'source4/auth') diff --git a/source4/auth/gensec/schannel.c b/source4/auth/gensec/schannel.c index bc616dc64e..5dc5c287ec 100644 --- a/source4/auth/gensec/schannel.c +++ b/source4/auth/gensec/schannel.c @@ -102,6 +102,8 @@ static NTSTATUS schannel_update(struct gensec_security *gensec_security, TALLOC_ status = ndr_pull_struct_blob(&in, out_mem_ctx, &bind_schannel, (ndr_pull_flags_fn_t)ndr_pull_schannel_bind); if (!NT_STATUS_IS_OK(status)) { + DEBUG(3, ("Could not parse incoming schannel bind: %s\n", + nt_errstr(status))); return status; } @@ -119,6 +121,9 @@ static NTSTATUS schannel_update(struct gensec_security *gensec_security, TALLOC_ if (!NT_STATUS_IS_OK(status)) { DEBUG(3, ("Could not find session key for attempted schannel connection from %s: %s\n", workstation, nt_errstr(status))); + if (NT_STATUS_EQUAL(status, NT_STATUS_INVALID_HANDLE)) { + return NT_STATUS_LOGON_FAILURE; + } return status; } -- cgit