s4:kdc: Fix return code in mit_samba_update_pac()

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Joseph Sutton <josephsutton@catalyst.net.nz>

diff --git a/selftest/knownfail_mit_kdc b/selftest/knownfail_mit_kdc
index c2a35c68152f2d68ac49c832032e51b18e7f3d25..25b1e5bb41381781060e766e3749c85d0a970923 100644 (file)
--- a/selftest/knownfail_mit_kdc
+++ b/selftest/knownfail_mit_kdc
@@ -219,8 +219,6 @@ samba.tests.krb5.as_canonicalization_tests.samba.tests.krb5.as_canonicalization_
 #
 # MIT currently fails some as_req_no_preauth tests.
 #
-^samba.tests.krb5.as_req_tests.samba.tests.krb5.as_req_tests.AsReqKerberosTests.test_as_req_enc_timestamp_spn(?!_)
-^samba.tests.krb5.as_req_tests.samba.tests.krb5.as_req_tests.AsReqKerberosTests.test_as_req_enc_timestamp_spn_realm
 ^samba.tests.krb5.as_req_tests.samba.tests.krb5.as_req_tests.AsReqKerberosTests.test_as_req_enc_timestamp_aes128_rc4.*fl2003dc
 ^samba.tests.krb5.as_req_tests.samba.tests.krb5.as_req_tests.AsReqKerberosTests.test_as_req_enc_timestamp_mac_aes128_rc4.*fl2003dc
 ^samba.tests.krb5.as_req_tests.samba.tests.krb5.as_req_tests.AsReqKerberosTests.test_as_req_no_preauth.*aes.*rc4.*fl2003dc

diff --git a/source4/kdc/mit_samba.c b/source4/kdc/mit_samba.c
index 056e18092381ed4680b7b70190251f29c84ca81c..a533c827a51cb89b32639ab314e481e75ac06972 100644 (file)
--- a/source4/kdc/mit_samba.c
+++ b/source4/kdc/mit_samba.c
@@ -1044,7 +1044,7 @@ krb5_error_code mit_samba_update_pac(struct mit_samba_context *ctx,
                                                    &requester_sid_blob,
                                                    &user_info_dc);
                if (!NT_STATUS_IS_OK(nt_status)) {
-                       code = EINVAL;
+                       code = KRB5KDC_ERR_TGT_REVOKED;
                        goto done;
                }