we can safely give NO_SUCH_USER if the ticket decodes but the local

account doesn't exist
(This used to be commit 477b6d27fd7281418739bc8ba0b984a53430ecda)

diff --git a/source3/smbd/sesssetup.c b/source3/smbd/sesssetup.c
index 1b6776ed70563cfceb04cd6655e916a6e595441f..d49dbc15d1b1a7f83512d6fee7cbd721bcbbf88a 100644 (file)
--- a/source3/smbd/sesssetup.c
+++ b/source3/smbd/sesssetup.c
@@ -113,7 +113,7 @@ static int reply_spnego_kerberos(connection_struct *conn,
        pw = smb_getpwnam(user,False);
        if (!pw) {
                DEBUG(1,("Username %s is invalid on this system\n",user));
-               return ERROR_NT(NT_STATUS_LOGON_FAILURE);
+               return ERROR_NT(NT_STATUS_NO_SUCH_USER);
        }
 
        if (!make_server_info_pw(&server_info,pw)) {