Changing log level of two entries to DBG_NOTICE

On domain members using RFC2307, machine acccounts without an uidNumber
attribute are not retrieved via idmap_ad. This leads to many of the following
two error messages:
   Username DOMAIN\machineaccountname$ is invalid on this system
and
   Failed to map kerberos principal to system user (NT_STATUS_LOGON_FAILURE)
Machine accounts don't have an uidNumber attribute, if not set manually. To
avoid flooding the logs, setting message from debug level 1 to DBG_NOTICE.

Bugreport: https://bugzilla.samba.org/show_bug.cgi?id=9912

Signed-off-by: Marc Muehlfeld <mmuehlfeld@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Wed Nov  4 00:46:15 CET 2015 on sn-devel-104

diff --git a/source3/auth/auth_generic.c b/source3/auth/auth_generic.c
index 584b52f518441a8abb81a12032b4f001d7d72575..74eb2fa076bdbe0ba89297616e3bab6d2c334b62 100644 (file)
--- a/source3/auth/auth_generic.c
+++ b/source3/auth/auth_generic.c
@@ -95,8 +95,8 @@ static NTSTATUS auth3_generate_session_info_pac(struct auth4_context *auth_ctx,
                                             &ntuser, &ntdomain,
                                             &username, &pw);
        if (!NT_STATUS_IS_OK(status)) {
-               DEBUG(1, ("Failed to map kerberos principal to system user "
-                         "(%s)\n", nt_errstr(status)));
+               DBG_NOTICE("Failed to map kerberos principal to system user "
+                         "(%s)\n", nt_errstr(status));
                status = NT_STATUS_ACCESS_DENIED;
                goto done;
        }

diff --git a/source3/auth/user_krb5.c b/source3/auth/user_krb5.c
index 7442ea424e0144cbf6b28e7fb8abdfeb1a7c744f..2b009baa58da74f85268d26f6f13405e67da5103 100644 (file)
--- a/source3/auth/user_krb5.c
+++ b/source3/auth/user_krb5.c
@@ -160,8 +160,8 @@ NTSTATUS get_user_from_kerberos_info(TALLOC_CTX *mem_ctx,
 
                /* extra sanity check that the guest account is valid */
                if (!pw) {
-                       DEBUG(1, ("Username %s is invalid on this system\n",
-                                 fuser));
+                       DBG_NOTICE("Username %s is invalid on this system\n",
+                                 fuser);
                        return NT_STATUS_LOGON_FAILURE;
                }
        }