r15392: In most cases, this mapping is more appropriate. (I know, it is still a

mess, but there is no way the get NTSTATUS from the edata yet).

Guenther
(This used to be commit be2bd3945c057a4ad72251f809cffbe4694a7e3d)

diff --git a/source3/libads/krb5_errs.c b/source3/libads/krb5_errs.c
index 0c2e704702c0528fbd656811e3f343a218a55dc2..e73482522b8b2d4072bf17b51281be32186c11d9 100644 (file)
--- a/source3/libads/krb5_errs.c
+++ b/source3/libads/krb5_errs.c
@@ -40,7 +40,7 @@ static const struct {
 #endif
        {25, NT_STATUS_PASSWORD_EXPIRED}, /* FIXME: bug in heimdal 0.7 krb5_get_init_creds_password (Inappropriate ioctl for device (25)) */
        {KRB5KDC_ERR_NULL_KEY, NT_STATUS_LOGON_FAILURE},
-       {KRB5KDC_ERR_POLICY, NT_STATUS_PASSWORD_RESTRICTION},
+       {KRB5KDC_ERR_POLICY, NT_STATUS_INVALID_WORKSTATION},
        {KRB5KDC_ERR_PREAUTH_FAILED, NT_STATUS_LOGON_FAILURE},
        {KRB5KDC_ERR_SERVICE_REVOKED, NT_STATUS_ACCESS_DENIED},
        {KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN, NT_STATUS_INVALID_ACCOUNT_NAME},