s4-rpc_server/drsuapi: Improve debugging of invalid DNs

This is still unreachable, so but improve the logging
to give more detail in this area anyway.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15401

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>

diff --git a/source4/rpc_server/drsuapi/getncchanges.c b/source4/rpc_server/drsuapi/getncchanges.c
index 256e5f178e31d549648bae49b294709101c96e59..4f2e60b55caad6b36c6940960e5b6dc3cf805030 100644 (file)
--- a/source4/rpc_server/drsuapi/getncchanges.c
+++ b/source4/rpc_server/drsuapi/getncchanges.c
@@ -2977,8 +2977,9 @@ allowed:
                         * This can't fail as we have done this above
                         * implicitly but not got the DN out
                         */
-                       DBG_ERR("Bad DN '%s'\n",
-                               drs_ObjectIdentifier_to_debug_string(mem_ctx, ncRoot));
+                       DBG_ERR("Bad DN '%s' as Naming Context for GetNCChanges: %s\n",
+                               drs_ObjectIdentifier_to_debug_string(mem_ctx, ncRoot),
+                               ldb_strerror(ret));
                        return WERR_DS_DRA_INVALID_PARAMETER;
                }
                if (ldb_dn_compare(new_dn, getnc_state->ncRoot_dn) != 0) {