summaryrefslogtreecommitdiff
path: root/source4/auth
diff options
context:
space:
mode:
authorAndreas Schneider <asn@samba.org>2015-05-05 16:53:24 +0200
committerAndreas Schneider <asn@cryptomilk.org>2015-07-30 10:24:26 +0200
commit80509dffdb7ebaa57e05589a9a896bf9a57a00e7 (patch)
tree559a80f28bd619a0cced095e45acc8a2d8e1470d /source4/auth
parent1c4dc00a5e7b3cf282a0ac79aafd702bcbf091ac (diff)
downloadsamba-80509dffdb7ebaa57e05589a9a896bf9a57a00e7.tar.gz
s3-auth: Add MIT return code for KDC not reachable
This fixes authentication with local credentials against its own server using netbios domain name. Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
Diffstat (limited to 'source4/auth')
-rw-r--r--source4/auth/gensec/gensec_gssapi.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/source4/auth/gensec/gensec_gssapi.c b/source4/auth/gensec/gensec_gssapi.c
index a12447a9c35..ed6d08aeef8 100644
--- a/source4/auth/gensec/gensec_gssapi.c
+++ b/source4/auth/gensec/gensec_gssapi.c
@@ -276,6 +276,7 @@ static NTSTATUS gensec_gssapi_client_creds(struct gensec_security *gensec_securi
case KRB5KDC_ERR_CLIENT_REVOKED:
DEBUG(1, ("Account locked out: %s\n", error_string));
return NT_STATUS_ACCOUNT_LOCKED_OUT;
+ case KRB5_REALM_UNKNOWN:
case KRB5_KDC_UNREACH:
DEBUG(3, ("Cannot reach a KDC we require to contact %s : %s\n", gensec_gssapi_state->target_principal, error_string));
return NT_STATUS_NO_LOGON_SERVERS;