From: Andreas Schneider <asn@samba.org>
Date: Wed, 14 Jan 2026 14:50:26 +0000 (+0100)
Subject: s3:libads: Set NT_STATUS_UNSUCCESSFUL for IP address entry
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=9e1bcf84d8a8386fb00aedf88e71b28504e449b4;p=thirdparty%2Fsamba.git

s3:libads: Set NT_STATUS_UNSUCCESSFUL for IP address entry

This is what we do in libads/ldap.c too.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15975

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Pavel Filipenský <pfilipensky@samba.org>
---

diff --git a/source3/libads/kerberos.c b/source3/libads/kerberos.c
index ed8d52f7866..ebad5056751 100644
--- a/source3/libads/kerberos.c
+++ b/source3/libads/kerberos.c
@@ -1264,7 +1264,10 @@ static char *get_kdc_ip_string(char *mem_ctx,
 				cldap_reply->pdc_dns_name);
 			if (has_entry) {
 				/* propagate blacklisting from name to ip */
-				add_failed_connection_entry(realm, addr, status);
+				add_failed_connection_entry(
+					realm,
+					addr,
+					NT_STATUS_UNSUCCESSFUL);
 				continue;
 			}
 		}