diff options
| author | Stefan Metzmacher <metze@samba.org> | 2019-11-19 12:10:11 +0100 |
|---|---|---|
| committer | Stefan Metzmacher <metze@samba.org> | 2020-02-10 16:32:37 +0000 |
| commit | 28d9493d232020a65b1b4634408c9341ef1dc39c (patch) | |
| tree | b1b7a465a6ade848179d4cb292244a8a73a638ba /auth | |
| parent | 62ee0d93cc5f809ebc5c4bcb4aa818aa4c69a9e3 (diff) | |
| download | samba-28d9493d232020a65b1b4634408c9341ef1dc39c.tar.gz | |
gensec/spnego: fallback on INVALID_{ACCOUNT,COMPUTER}_NAME and NO_SUCH_DOMAIN
I think it's better to handle them in spnego.c, instead of squashing
them already in the gssapi/gse modules. This is related to
KRB5KDC_ERR_{C,S}_PRINCIPAL_UNKNOWN and KRB5_REALM_UNKNOWN.
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
Diffstat (limited to 'auth')
| -rw-r--r-- | auth/gensec/spnego.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/auth/gensec/spnego.c b/auth/gensec/spnego.c index db8a91b6f34..87545d860e8 100644 --- a/auth/gensec/spnego.c +++ b/auth/gensec/spnego.c @@ -569,6 +569,9 @@ static NTSTATUS gensec_spnego_client_negTokenInit_step( * of this mech */ if (NT_STATUS_EQUAL(status, NT_STATUS_INVALID_PARAMETER) || + NT_STATUS_EQUAL(status, NT_STATUS_INVALID_ACCOUNT_NAME) || + NT_STATUS_EQUAL(status, NT_STATUS_INVALID_COMPUTER_NAME) || + NT_STATUS_EQUAL(status, NT_STATUS_NO_SUCH_DOMAIN) || NT_STATUS_EQUAL(status, NT_STATUS_NO_LOGON_SERVERS) || NT_STATUS_EQUAL(status, NT_STATUS_TIME_DIFFERENCE_AT_DC) || NT_STATUS_EQUAL(status, NT_STATUS_CANT_ACCESS_DOMAIN_INFO)) |