s4-rpc_server/drsuapi: Improve debugging of invalid DNs

This is still unreachable, so but improve the logging
to give more detail in this area anyway.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15401

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
(cherry picked from commit d0c1ce53add2fd3b3a4186581f4e214029cbcf1a)

diff --git a/source4/rpc_server/drsuapi/getncchanges.c b/source4/rpc_server/drsuapi/getncchanges.c
index 9eb75c8502a52ea609c2efa5e130c7f28b1c3611..d730a1d18f5554a3570a8a3b2ea27b8a4b69bab0 100644 (file)
--- a/source4/rpc_server/drsuapi/getncchanges.c
+++ b/source4/rpc_server/drsuapi/getncchanges.c
@@ -2977,8 +2977,9 @@ allowed:
                         * This can't fail as we have done this above
                         * implicitly but not got the DN out
                         */
-                       DBG_ERR("Bad DN '%s'\n",
-                               drs_ObjectIdentifier_to_debug_string(mem_ctx, ncRoot));
+                       DBG_ERR("Bad DN '%s' as Naming Context for GetNCChanges: %s\n",
+                               drs_ObjectIdentifier_to_debug_string(mem_ctx, ncRoot),
+                               ldb_strerror(ret));
                        return WERR_DS_DRA_INVALID_PARAMETER;
                }
                if (ldb_dn_compare(new_dn, getnc_state->ncRoot_dn) != 0) {