krb5_wrap: map KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN to NT_STATUS_INVALID_COMPUTER_NAME

KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN is already mapped to
NT_STATUS_INVALID_ACCOUNT_NAME and we need a way to
distinguish between client and server principal
at the NTSTATUS layer too.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>

diff --git a/lib/krb5_wrap/krb5_errs.c b/lib/krb5_wrap/krb5_errs.c
index 37428defe1ef26e5e5c60cb221aa3dc5fdaa4775..0cf79023bce17559085baf3697dd416a08070d9c 100644 (file)
--- a/lib/krb5_wrap/krb5_errs.c
+++ b/lib/krb5_wrap/krb5_errs.c
@@ -41,7 +41,7 @@ static const struct {
        {KRB5KDC_ERR_POLICY, NT_STATUS_INVALID_WORKSTATION},
        {KRB5KDC_ERR_PREAUTH_FAILED, NT_STATUS_LOGON_FAILURE},
        {KRB5KDC_ERR_SERVICE_REVOKED, NT_STATUS_ACCESS_DENIED},
-       {KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN, NT_STATUS_INVALID_ACCOUNT_NAME},
+       {KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN, NT_STATUS_INVALID_COMPUTER_NAME},
        {KRB5KDC_ERR_SUMTYPE_NOSUPP, NT_STATUS_LOGON_FAILURE},
        {KRB5KDC_ERR_TGT_REVOKED, NT_STATUS_ACCESS_DENIED},
        {KRB5_KDC_UNREACH, NT_STATUS_NO_LOGON_SERVERS},