s4-rpc_server/drsuapi: Return correct error code for an invalid DN to EXOP_REPL_OBJ...

[samba.git] / source4 / rpc_server / drsuapi / getncchanges.c

diff --git a/source4/rpc_server/drsuapi/getncchanges.c b/source4/rpc_server/drsuapi/getncchanges.c
index 02a6dd3f803746b57160889d36a1c24e76af7757..e2d0781fc4ad97933cacf400436af1ad17ba86e5 100644 (file)
--- a/source4/rpc_server/drsuapi/getncchanges.c
+++ b/source4/rpc_server/drsuapi/getncchanges.c
@@ -2794,6 +2794,20 @@ WERROR dcesrv_drsuapi_DsGetNCChanges(struct dcesrv_call_state *dce_call, TALLOC_
                                                 session_info->security_token,
                                                 req10->naming_context,
                                                 GUID_DRS_GET_CHANGES);
+
+       if (W_ERROR_EQUAL(werr, WERR_DS_DRA_BAD_NC)) {
+               /*
+                * These extended operations need a different error if
+                * the supplied DN can't be found
+                */
+               switch (req10->extended_op) {
+               case DRSUAPI_EXOP_REPL_OBJ:
+               case DRSUAPI_EXOP_REPL_SECRET:
+                       return WERR_DS_DRA_BAD_DN;
+               default:
+                       return werr;
+               }
+       }
        if (!W_ERROR_IS_OK(werr)) {
                return werr;
        }