diff options
| author | Christof Schmitt <cs@samba.org> | 2016-07-01 11:52:15 -0700 |
|---|---|---|
| committer | Andrew Bartlett <abartlet@samba.org> | 2016-07-06 04:27:03 +0200 |
| commit | 20319ba51e0df60e1dc7787b81f7078467d64878 (patch) | |
| tree | 673aa37bb5af759e0b6adff2ec32d471417c070b /auth/kerberos | |
| parent | 77f3730295735dc9465c8e3d07fc761c83761b6e (diff) | |
| download | samba-20319ba51e0df60e1dc7787b81f7078467d64878.tar.gz | |
gensec: Change log level for message when obtaining PAC from gss_get_name_attribute failed
This is the second part for the issue from commit 8bb4fccd. A KDC that
does not return a PAC first triggers this message, then the "resorting
to local user lookup" one. Change the log level for the "obtaining PAC
via GSSAPI gss_get_name_attribute" message as well to avoid spamming the
logs during normal usage. While changing this message, also remove the
discard_const since it is no longer required.
Signed-off-by: Christof Schmitt <cs@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Wed Jul 6 04:27:03 CEST 2016 on sn-devel-144
Diffstat (limited to 'auth/kerberos')
| -rw-r--r-- | auth/kerberos/gssapi_pac.c | 10 |
1 files changed, 4 insertions, 6 deletions
diff --git a/auth/kerberos/gssapi_pac.c b/auth/kerberos/gssapi_pac.c index 74c199adc94..bcc1ba4372a 100644 --- a/auth/kerberos/gssapi_pac.c +++ b/auth/kerberos/gssapi_pac.c @@ -112,12 +112,10 @@ NTSTATUS gssapi_obtain_pac_blob(TALLOC_CTX *mem_ctx, &pac_buffer, &pac_display_buffer, &more); if (gss_maj != 0) { - DEBUG(0, ("obtaining PAC via GSSAPI gss_get_name_attribute failed: %s\n", - gssapi_error_string(mem_ctx, - gss_maj, - gss_min, - discard_const_p(struct gss_OID_desc_struct, - gss_mech_krb5)))); + DBG_NOTICE("obtaining PAC via GSSAPI gss_get_name_attribute " + "failed: %s\n", gssapi_error_string(mem_ctx, + gss_maj, gss_min, + gss_mech_krb5)); return NT_STATUS_ACCESS_DENIED; } else if (authenticated && complete) { /* The PAC blob is returned directly */ |