gensec: map KRB5KRB_AP_ERR_BAD_INTEGRITY to logon failure.
authorGünther Deschner <gd@samba.org>
Sat, 7 Feb 2015 09:48:30 +0000 (10:48 +0100)
committerGünther Deschner <gd@samba.org>
Fri, 27 Mar 2015 00:26:16 +0000 (01:26 +0100)
commitde6021127d2d666280d11ebcf41dd2a64f6591f3
treec441a7950d645d62358eecceb8e0dc56041ffe7f
parentac23b7dd52c4bd2649577a25fc41c94998ec8f88
gensec: map KRB5KRB_AP_ERR_BAD_INTEGRITY to logon failure.

When requesting initiator credentials fails, we need to map the error code
KRB5KRB_AP_ERR_BAD_INTEGRITY to NT_STATUS_LOGON_FAILURE as well. This is what
current MIT kerberos returns.

Guenther

Signed-off-by: Günther Deschner <gd@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
source4/auth/gensec/gensec_gssapi.c