From f81bb8df6747828f101a6a23ceb9bc31c267a4be Mon Sep 17 00:00:00 2001
From: Andrew Bartlett <abartlet@samba.org>
Date: Thu, 25 Aug 2011 19:20:28 +1000
Subject: s4-dsdb Return ACL errors as ldb_errstring()

This string is reported to the caller, which makes debugging much easier.

Andrew Bartlett
---
 source4/dsdb/common/dsdb_access.c | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'source4/dsdb/common')

diff --git a/source4/dsdb/common/dsdb_access.c b/source4/dsdb/common/dsdb_access.c
index 39e67b7793..b8784fc62f 100644
--- a/source4/dsdb/common/dsdb_access.c
+++ b/source4/dsdb/common/dsdb_access.c
@@ -124,6 +124,9 @@ int dsdb_check_access_on_dn_internal(struct ldb_context *ldb,
 			       dn,
 			       true,
 			       10);
+		ldb_asprintf_errstring(ldb,
+				       "dsdb_access: Access check failed on %s",
+				       ldb_dn_get_linearized(dn));
 		return LDB_ERR_INSUFFICIENT_ACCESS_RIGHTS;
 	}
 	return LDB_SUCCESS;
-- 
cgit