From b0d37f6ca1bbbae389f8fe6d5a2b416f0decb9a9 Mon Sep 17 00:00:00 2001 From: Garming Sam Date: Mon, 27 Feb 2017 14:40:40 +1300 Subject: [PATCH] getncchanges: Return correct denied REPL_SECRET error code Signed-off-by: Garming Sam Reviewed-by: Andrew Bartlett --- libcli/util/werror.h | 2 ++ source4/rpc_server/drsuapi/getncchanges.c | 2 +- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/libcli/util/werror.h b/libcli/util/werror.h index 7adda290c78..c25a4ab4138 100644 --- a/libcli/util/werror.h +++ b/libcli/util/werror.h @@ -99,6 +99,8 @@ typedef uint32_t WERROR; #define WERR_ALERTED W_ERROR(0x000002E3) #define WERR_INVALID_PRIMARY_GROUP W_ERROR(0x0000051C) +#define WERR_DS_DRA_SECRETS_DENIED W_ERROR(0x000021B6) + #define WERR_DNS_ERROR_KEYMASTER_REQUIRED W_ERROR(0x0000238D) #define WERR_DNS_ERROR_NOT_ALLOWED_ON_SIGNED_ZONE W_ERROR(0x0000238E) #define WERR_DNS_ERROR_INVALID_NSEC3_PARAMETERS W_ERROR(0x0000238F) diff --git a/source4/rpc_server/drsuapi/getncchanges.c b/source4/rpc_server/drsuapi/getncchanges.c index 09b6d89e454..6fbebd51fc4 100644 --- a/source4/rpc_server/drsuapi/getncchanges.c +++ b/source4/rpc_server/drsuapi/getncchanges.c @@ -1117,7 +1117,7 @@ denied: DEBUG(2,(__location__ ": Denied single object with secret replication for %s by RODC %s\n", ldb_dn_get_linearized(obj_dn), ldb_dn_get_linearized(rodc_res->msgs[0]->dn))); ctr6->extended_ret = DRSUAPI_EXOP_ERR_NONE; - return WERR_DS_DRA_ACCESS_DENIED; + return WERR_DS_DRA_SECRETS_DENIED; allowed: DEBUG(2,(__location__ ": Allowed single object with secret replication for %s by %s %s\n", -- 2.47.3