s4:kdc: don't return ENOENT from samba_kdc_get_claims_data[_from_pac]

This will matter in the next commits.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>

diff --git a/source4/kdc/pac-glue.c b/source4/kdc/pac-glue.c
index 644cc526318031fddd5e1eb1507253564245cd9c..5c179049b38980d0170c780e434dbbff53ee6347 100644 (file)
--- a/source4/kdc/pac-glue.c
+++ b/source4/kdc/pac-glue.c
@@ -2918,6 +2918,8 @@ krb5_error_code samba_kdc_get_claims_data_from_pac(TALLOC_CTX *mem_ctx,
                                   &claims_info);
        if (code == ENOENT) {
                /* OK. */
+               krb5_clear_error_message(context);
+               code = 0;
        } else if (code != 0) {
                DBG_ERR("Error getting CLIENT_CLAIMS_INFO from PAC\n");
                goto out;