diff options
| author | Jakub Hrozek <jhrozek@redhat.com> | 2015-11-27 14:45:03 +0100 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2015-12-07 16:07:59 +0100 |
| commit | 9f69dff2af5ee0e922ca75efa9749913fd2d944f (patch) | |
| tree | 3d561b9132cdb40096e153b45cb35c045bc1c6cb | |
| parent | 54189e0a2f24a2951d95a2ec5da3125a52e2f5ed (diff) | |
| download | sssd-9f69dff2af5ee0e922ca75efa9749913fd2d944f.tar.gz sssd-9f69dff2af5ee0e922ca75efa9749913fd2d944f.tar.xz sssd-9f69dff2af5ee0e922ca75efa9749913fd2d944f.zip | |
KRB5: Handle KRB5_REALM_UNKNOWN as ERR_NETWORK_IO
Resolves:
https://fedorahosted.org/sssd/ticket/2866
This would help users who authenticate to AD trust servers while offline
and see error messages such as:
[get_and_save_tgt] (0x0020): 996: [-1765328230][Cannot find KDC for realm "AD.EXAMPLE.COM"]
in the krb5_child.log
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
| -rw-r--r-- | src/providers/krb5/krb5_child.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/providers/krb5/krb5_child.c b/src/providers/krb5/krb5_child.c index be8db23df..b39269ee8 100644 --- a/src/providers/krb5/krb5_child.c +++ b/src/providers/krb5/krb5_child.c @@ -1309,6 +1309,7 @@ static errno_t map_krb5_error(krb5_error_code kerr) case KRB5KRB_AP_ERR_SKEW: case KRB5_KDC_UNREACH: case KRB5_REALM_CANT_RESOLVE: + case KRB5_REALM_UNKNOWN: return ERR_NETWORK_IO; case KRB5KDC_ERR_CLIENT_REVOKED: |