s4/dns_server: error codes for failing MAC verification in TSIG requests
authorRalph Boehme <slow@samba.org>
Mon, 30 May 2016 14:40:45 +0000 (16:40 +0200)
committerGarming Sam <garming@catalyst.net.nz>
Thu, 16 Jun 2016 00:03:11 +0000 (12:03 +1200)
commit4eae273ac1935aa52d0e937c7739fabffde01a64
tree2c267253ed5452460db9cfce78e1ab48e83b11a6
parentc8551e275fd81ec51747d7e7e167dc96f49b0d85
s4/dns_server: error codes for failing MAC verification in TSIG requests

According to RFC 2845 "4.5.3. MAC check and error handling" we must
return NOTAUTH and DNS_RCODE_BADSIG when MAC verification fails.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=11520

Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Garming Sam <garming@catalyst.net.nz>
source4/dns_server/dns_crypto.c