s3-rpc_server: Allow gensec mechanisms to return NT_STATUS_OK

If a kerberos mechanism is added, then it can return OK after just one packet.

Andrew Bartlett

Signed-off-by: Stefan Metzmacher <metze@samba.org>

diff --git a/source3/rpc_server/dcesrv_auth_generic.c b/source3/rpc_server/dcesrv_auth_generic.c
index 1756cddebd908b6482a5efd6438b159f7edd6fa8..16dfd4a976856950a3a39af2bb0858886e6f93fe 100644 (file)
--- a/source3/rpc_server/dcesrv_auth_generic.c
+++ b/source3/rpc_server/dcesrv_auth_generic.c
@@ -65,8 +65,8 @@ NTSTATUS auth_generic_server_start(TALLOC_CTX *mem_ctx,
        }
 
        status = gensec_update(a->gensec_security, mem_ctx, NULL, *token_in, token_out);
-       if (!NT_STATUS_EQUAL(status, NT_STATUS_MORE_PROCESSING_REQUIRED)) {
-               DEBUG(0, (__location__ ": auth_ntlmssp_update failed: %s\n",
+       if (!NT_STATUS_IS_OK(status) && !NT_STATUS_EQUAL(status, NT_STATUS_MORE_PROCESSING_REQUIRED)) {
+               DEBUG(2, (__location__ ": gensec_update failed: %s\n",
                          nt_errstr(status)));
                goto done;
        }