From 804b26a0d91d0b551f2f0df11507ef065f8a1f67 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek@redhat.com>
Date: Tue, 23 Oct 2012 15:12:45 +0200
Subject: KRB5: Return error when principal selection fails

The ldap_child would return a NULL ccache but the error code would still
indicate success.

https://fedorahosted.org/sssd/ticket/1594
---
 src/providers/ldap/ldap_child.c | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

(limited to 'src/providers/ldap/ldap_child.c')

diff --git a/src/providers/ldap/ldap_child.c b/src/providers/ldap/ldap_child.c
index e0529dbc..f35d9467 100644
--- a/src/providers/ldap/ldap_child.c
+++ b/src/providers/ldap/ldap_child.c
@@ -242,7 +242,10 @@ static krb5_error_code ldap_child_get_tgt_sync(TALLOC_CTX *memctx,
 
         ret = select_principal_from_keytab(memctx, hostname, realm_name,
                 keytab_name, &full_princ, NULL, NULL);
-        if (ret) goto done;
+        if (ret) {
+            krberr = KRB5_KT_IOERR;
+            goto done;
+        }
     }
     if (!full_princ) {
         krberr = KRB5KRB_ERR_GENERIC;
-- 
cgit