summaryrefslogtreecommitdiffstats
path: root/source4/auth
diff options
context:
space:
mode:
authorAndrew Bartlett <abartlet@samba.org>2013-11-25 14:09:48 +1300
committerStefan Metzmacher <metze@samba.org>2014-04-02 17:12:46 +0200
commit60024cdd730bc2c97ab80b1e8c7d26da9f9bd624 (patch)
treef91d4e917bf80a9e84aba3a8efda62356b7deef5 /source4/auth
parentbefae7f6e65add893cf24a088b93f0350b0b482e (diff)
downloadsamba-60024cdd730bc2c97ab80b1e8c7d26da9f9bd624.tar.gz
samba-60024cdd730bc2c97ab80b1e8c7d26da9f9bd624.tar.xz
samba-60024cdd730bc2c97ab80b1e8c7d26da9f9bd624.zip
kerberos: Map KRB5KDC_ERR_CLIENT_REVOKED to NT_STATUS_ACCOUNT_LOCKED_OUT
Change-Id: I333083e11a56d0f99ec36df25a96804d0ff2d110 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
Diffstat (limited to 'source4/auth')
-rw-r--r--source4/auth/gensec/gensec_gssapi.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/source4/auth/gensec/gensec_gssapi.c b/source4/auth/gensec/gensec_gssapi.c
index 0bb307f989a..63fda1f807d 100644
--- a/source4/auth/gensec/gensec_gssapi.c
+++ b/source4/auth/gensec/gensec_gssapi.c
@@ -306,6 +306,9 @@ static NTSTATUS gensec_gssapi_client_creds(struct gensec_security *gensec_securi
case KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN:
DEBUG(1, ("Wrong username or password: %s\n", error_string));
return NT_STATUS_LOGON_FAILURE;
+ case KRB5KDC_ERR_CLIENT_REVOKED:
+ DEBUG(1, ("Account locked out: %s\n", error_string));
+ return NT_STATUS_ACCOUNT_LOCKED_OUT;
case KRB5_KDC_UNREACH:
DEBUG(3, ("Cannot reach a KDC we require to contact %s : %s\n", gensec_gssapi_state->target_principal, error_string));
return NT_STATUS_NO_LOGON_SERVERS;