From 9b24f6523e8c78879ada3e6d2927ebbb21dabfdc Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Mon, 13 May 2013 14:06:14 +1200 Subject: dsdb: Expand on what the error finding the ntSecurityDescriptor was in acl_read Reviewed-by: Stefan Metzmacher --- source4/dsdb/samdb/ldb_modules/acl_read.c | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) (limited to 'source4') diff --git a/source4/dsdb/samdb/ldb_modules/acl_read.c b/source4/dsdb/samdb/ldb_modules/acl_read.c index 07b1bc4e5e..f15633f28f 100644 --- a/source4/dsdb/samdb/ldb_modules/acl_read.c +++ b/source4/dsdb/samdb/ldb_modules/acl_read.c @@ -92,9 +92,15 @@ static int aclread_callback(struct ldb_request *req, struct ldb_reply *ares) case LDB_REPLY_ENTRY: msg = ares->message; ret = dsdb_get_sd_from_ldb_message(ldb, tmp_ctx, msg, &sd); - if (ret != LDB_SUCCESS || sd == NULL ) { + if (ret != LDB_SUCCESS) { + ldb_debug_set(ldb, LDB_DEBUG_FATAL, + "acl_read: cannot get descriptor of %s: %s\n", + ldb_dn_get_linearized(msg->dn), ldb_strerror(ret)); + ret = LDB_ERR_OPERATIONS_ERROR; + goto fail; + } else if (sd == NULL) { ldb_debug_set(ldb, LDB_DEBUG_FATAL, - "acl_read: cannot get descriptor of %s\n", + "acl_read: cannot get descriptor of %s (attribute not found)\n", ldb_dn_get_linearized(msg->dn)); ret = LDB_ERR_OPERATIONS_ERROR; goto fail; -- cgit