r25328: When using ldap sasl wrapping with gssapi it's important to receive warnings

for clock-skew errors.

Guenther
(This used to be commit 53c99d415d605ab03e3646f6096aff794457dd33)

diff --git a/source3/libads/sasl.c b/source3/libads/sasl.c
index c4b383e0269b27b554720682ab8a0fa1af66bf28..dec8756a860de13378f17e3ab7622d2cda83b6d6 100644 (file)
--- a/source3/libads/sasl.c
+++ b/source3/libads/sasl.c
@@ -811,6 +811,11 @@ static ADS_STATUS ads_sasl_spnego_bind(ADS_STRUCT *ads)
 
                if (ADS_ERR_OK(status)) {
                        status = ads_sasl_spnego_krb5_bind(ads, &p);
+                       if (!ADS_ERR_OK(status)) {
+                               DEBUG(0,("kinit succeeded but "
+                                       "ads_sasl_spnego_krb5_bind failed: %s\n",
+                                       ads_errstr(status)));
+                       }
                }
 
                ads_free_service_principal(&p);