s4:gensec Print GSSAPI error message when unable to find PAC

diff --git a/source4/auth/gensec/gensec_krb5.c b/source4/auth/gensec/gensec_krb5.c
index b04abfc16c83085bb8b54ed5ecbf8e50f8f890a3..09bdec512d23bca9a9df7ac97d336a6b62a1ba22 100644 (file)
--- a/source4/auth/gensec/gensec_krb5.c
+++ b/source4/auth/gensec/gensec_krb5.c
@@ -609,7 +609,9 @@ static NTSTATUS gensec_krb5_session_info(struct gensec_security *gensec_security
                                                     ret, mem_ctx)));
                if (gensec_security->auth_context && 
                    !gensec_setting_bool(gensec_security->settings, "gensec", "require_pac", false)) {
-                       DEBUG(1, ("Unable to find PAC, resorting to local user lookup: %s"));
+                       DEBUG(1, ("Unable to find PAC for %s, resorting to local user lookup: %s",
+                                 principal_string, smb_get_krb5_error_message(context, 
+                                                    ret, mem_ctx)));
                        nt_status = gensec_security->auth_context->get_server_info_principal(mem_ctx, 
                                                                                             gensec_security->auth_context, 
                                                                                             principal_string,