From: Stefan Metzmacher <metze@samba.org>
Date: Wed, 25 Jan 2012 10:18:00 +0000 (+0100)
Subject: s3:gse: return NT_STATUS_LOGON_FAILURE instead of NT_STATUS_INTERNAL_ERROR
X-Git-Tag: tevent-0.9.15~173
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=01588585b172a1428ca2332514250be2f99490c7;p=thirdparty%2Fsamba.git

s3:gse: return NT_STATUS_LOGON_FAILURE instead of NT_STATUS_INTERNAL_ERROR

This matches the behavior of ads_verify_ticket().

Note that ads_verify_ticket() calls krb5_to_nt_status(), but
as a server it's likely to always returns NT_STATUS_UNSUCCESSFUL.
ads_verify_ticket() maps NT_STATUS_UNSUCCESSFUL to NT_STATUS_LOGON_FAILURE.

metze

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Thu Jan 26 10:48:36 CET 2012 on sn-devel-104
---

diff --git a/source3/librpc/crypto/gse.c b/source3/librpc/crypto/gse.c
index 0e664b78ead..ec370730149 100644
--- a/source3/librpc/crypto/gse.c
+++ b/source3/librpc/crypto/gse.c
@@ -503,7 +503,7 @@ static NTSTATUS gse_get_server_auth_token(TALLOC_CTX *mem_ctx,
 		status = NT_STATUS_MORE_PROCESSING_REQUIRED;
 		break;
 	default:
-		DEBUG(0, ("gss_init_sec_context failed with [%s]\n",
+		DEBUG(1, ("gss_init_sec_context failed with [%s]\n",
 			  gse_errstr(talloc_tos(), gss_maj, gss_min)));
 
 		if (gse_ctx->gssapi_context) {
@@ -512,7 +512,7 @@ static NTSTATUS gse_get_server_auth_token(TALLOC_CTX *mem_ctx,
 						GSS_C_NO_BUFFER);
 		}
 
-		status = NT_STATUS_INTERNAL_ERROR;
+		status = NT_STATUS_LOGON_FAILURE;
 		goto done;
 	}