auth/gensec/spnego: map SPNEGO_REJECT to NT_STATUS_LOGON_FAILURE

This is what NTLMSSP also gives.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Thu Mar 27 02:34:36 CET 2014 on sn-devel-104

diff --git a/auth/gensec/spnego.c b/auth/gensec/spnego.c
index 6878b4fd46d303e50a51b62eaba9f8cf2a3d7029..7e9dcaee70c67cc5689c67bd1a9e9be14edf9e25 100644 (file)
--- a/auth/gensec/spnego.c
+++ b/auth/gensec/spnego.c
@@ -1010,7 +1010,7 @@ static NTSTATUS gensec_spnego_update(struct gensec_security *gensec_security, TA
 
                if (spnego.negTokenTarg.negResult == SPNEGO_REJECT) {
                        spnego_free_data(&spnego);
-                       return NT_STATUS_ACCESS_DENIED;
+                       return NT_STATUS_LOGON_FAILURE;
                }
 
                /* Server didn't like our choice of mech, and chose something else */