diff options
author | Andrew Bartlett <abartlet@samba.org> | 2013-11-25 14:09:48 +1300 |
---|---|---|
committer | Stefan Metzmacher <metze@samba.org> | 2014-04-02 17:12:46 +0200 |
commit | 60024cdd730bc2c97ab80b1e8c7d26da9f9bd624 (patch) | |
tree | f91d4e917bf80a9e84aba3a8efda62356b7deef5 /source4/auth/gensec | |
parent | befae7f6e65add893cf24a088b93f0350b0b482e (diff) | |
download | samba-60024cdd730bc2c97ab80b1e8c7d26da9f9bd624.tar.gz samba-60024cdd730bc2c97ab80b1e8c7d26da9f9bd624.tar.xz samba-60024cdd730bc2c97ab80b1e8c7d26da9f9bd624.zip |
kerberos: Map KRB5KDC_ERR_CLIENT_REVOKED to NT_STATUS_ACCOUNT_LOCKED_OUT
Change-Id: I333083e11a56d0f99ec36df25a96804d0ff2d110
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
Diffstat (limited to 'source4/auth/gensec')
-rw-r--r-- | source4/auth/gensec/gensec_gssapi.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/source4/auth/gensec/gensec_gssapi.c b/source4/auth/gensec/gensec_gssapi.c index 0bb307f989a..63fda1f807d 100644 --- a/source4/auth/gensec/gensec_gssapi.c +++ b/source4/auth/gensec/gensec_gssapi.c @@ -306,6 +306,9 @@ static NTSTATUS gensec_gssapi_client_creds(struct gensec_security *gensec_securi case KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN: DEBUG(1, ("Wrong username or password: %s\n", error_string)); return NT_STATUS_LOGON_FAILURE; + case KRB5KDC_ERR_CLIENT_REVOKED: + DEBUG(1, ("Account locked out: %s\n", error_string)); + return NT_STATUS_ACCOUNT_LOCKED_OUT; case KRB5_KDC_UNREACH: DEBUG(3, ("Cannot reach a KDC we require to contact %s : %s\n", gensec_gssapi_state->target_principal, error_string)); return NT_STATUS_NO_LOGON_SERVERS; |