s3: librpc: Allow client to correctly report etype unsupported by KDC to caller.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13247

Signed-off-by: Jeremy Allison <jra@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date(master): Wed Jan 31 00:38:09 CET 2018 on sn-devel-144

diff --git a/source3/librpc/crypto/gse.c b/source3/librpc/crypto/gse.c
index bcda8de896f5cadbb6d839da6501e22b059be3fd..5cb664710ef8f524db052b8800f31ab6fc73fbc9 100644 (file)
--- a/source3/librpc/crypto/gse.c
+++ b/source3/librpc/crypto/gse.c
@@ -526,6 +526,9 @@ init_sec_context_done:
                        /* Garbage input, possibly from the auto-mech detection */
                        status = NT_STATUS_INVALID_PARAMETER;
                        goto done;
+               case (OM_uint32)KRB5KDC_ERR_ETYPE_NOSUPP:
+                       status = NT_STATUS_KDC_UNKNOWN_ETYPE;
+                       goto done;
                default:
                        DBG_ERR("gss_init_sec_context failed with [%s](%u)\n",
                                gse_errstr(talloc_tos(), gss_maj, gss_min),