[SCM] Samba Shared Repository - branch master updated

Stefan Metzmacher metze at samba.org
Thu Jan 26 02:49:04 MST 2012


The branch, master has been updated
       via  0158858 s3:gse: return NT_STATUS_LOGON_FAILURE instead of NT_STATUS_INTERNAL_ERROR
      from  b7becc0 s4-rpc_server: Fix search for existing trust to actually look for the dns name

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -----------------------------------------------------------------
commit 01588585b172a1428ca2332514250be2f99490c7
Author: Stefan Metzmacher <metze at samba.org>
Date:   Wed Jan 25 11:18:00 2012 +0100

    s3:gse: return NT_STATUS_LOGON_FAILURE instead of NT_STATUS_INTERNAL_ERROR
    
    This matches the behavior of ads_verify_ticket().
    
    Note that ads_verify_ticket() calls krb5_to_nt_status(), but
    as a server it's likely to always returns NT_STATUS_UNSUCCESSFUL.
    ads_verify_ticket() maps NT_STATUS_UNSUCCESSFUL to NT_STATUS_LOGON_FAILURE.
    
    metze
    
    Autobuild-User: Stefan Metzmacher <metze at samba.org>
    Autobuild-Date: Thu Jan 26 10:48:36 CET 2012 on sn-devel-104

-----------------------------------------------------------------------

Summary of changes:
 source3/librpc/crypto/gse.c |    4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/librpc/crypto/gse.c b/source3/librpc/crypto/gse.c
index 0e664b7..ec37073 100644
--- a/source3/librpc/crypto/gse.c
+++ b/source3/librpc/crypto/gse.c
@@ -503,7 +503,7 @@ static NTSTATUS gse_get_server_auth_token(TALLOC_CTX *mem_ctx,
 		status = NT_STATUS_MORE_PROCESSING_REQUIRED;
 		break;
 	default:
-		DEBUG(0, ("gss_init_sec_context failed with [%s]\n",
+		DEBUG(1, ("gss_init_sec_context failed with [%s]\n",
 			  gse_errstr(talloc_tos(), gss_maj, gss_min)));
 
 		if (gse_ctx->gssapi_context) {
@@ -512,7 +512,7 @@ static NTSTATUS gse_get_server_auth_token(TALLOC_CTX *mem_ctx,
 						GSS_C_NO_BUFFER);
 		}
 
-		status = NT_STATUS_INTERNAL_ERROR;
+		status = NT_STATUS_LOGON_FAILURE;
 		goto done;
 	}
 


-- 
Samba Shared Repository


More information about the samba-cvs mailing list