libcli: Increase the debug level for expired tickets

In libads/sasl.c we do a retry in this case. We should not
spam syslog with that.

Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Wed Nov  2 05:22:38 CET 2016 on sn-devel-144

diff --git a/source3/librpc/crypto/gse.c b/source3/librpc/crypto/gse.c
index e67065a5f49c08efef42364c38c81b7986fa5e66..3ccbb0e18a0861bcb4969094f2f9c3b00efe183c 100644 (file)
--- a/source3/librpc/crypto/gse.c
+++ b/source3/librpc/crypto/gse.c
@@ -341,8 +341,13 @@ static NTSTATUS gse_get_client_auth_token(TALLOC_CTX *mem_ctx,
                status = NT_STATUS_MORE_PROCESSING_REQUIRED;
                break;
        default:
-               DEBUG(0, ("gss_init_sec_context failed with [%s]\n",
-                         gse_errstr(talloc_tos(), gss_maj, gss_min)));
+               if ((gss_maj == GSS_S_FAILURE) &&
+                   (gss_min == KRB5KRB_AP_ERR_TKT_EXPIRED)) {
+                       DBG_NOTICE("Ticket expired\n");
+               } else {
+                       DBG_ERR("gss_init_sec_context failed with [%s]\n",
+                               gse_errstr(talloc_tos(), gss_maj, gss_min));
+               }
                status = NT_STATUS_INTERNAL_ERROR;
                goto done;
        }