Set the right return value if wbc_status is set to an error.

Guenther
(cherry picked from commit 458a65b409f25f913a8122b320b38d1669137f06)

diff --git a/source/nsswitch/pam_winbind.c b/source/nsswitch/pam_winbind.c
index 1d6ff9d119a2c92cfc5eb520dfeebfb7bb0cb66b..3897856d333fdcef5d481b7d023adeadb9daed2c 100644 (file)
--- a/source/nsswitch/pam_winbind.c
+++ b/source/nsswitch/pam_winbind.c
@@ -2757,6 +2757,11 @@ out:
                pam_putenv(pamh, "KRB5CCNAME");
        }
 
+       if (!WBC_ERROR_IS_OK(wbc_status)) {
+               retval = wbc_auth_error_to_pam_error(ctx, error, wbc_status,
+                    user, "wbcLogoffUser");
+       }
+
        _PAM_LOG_FUNCTION_LEAVE("pam_sm_close_session", ctx, retval);
 
        TALLOC_FREE(ctx);