lib/krb5_wrap: provide KRB5KDC_ERR_KEY_EXPIRED error code matching MIT.

Guenther

Signed-off-by: Günther Deschner <gd@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>

diff --git a/source4/kdc/pac-glue.c b/source4/kdc/pac-glue.c
index e344aa3e2d951349b8b9365f194fdbcc9c158848..1558d2185f3cc9d885158ed5013d0d980c82a501 100644 (file)
--- a/source4/kdc/pac-glue.c
+++ b/source4/kdc/pac-glue.c
@@ -420,9 +420,9 @@ krb5_error_code samba_kdc_map_policy_err(NTSTATUS nt_status)
        krb5_error_code ret;
 
        if (NT_STATUS_EQUAL(nt_status, NT_STATUS_PASSWORD_MUST_CHANGE))
-               ret = KRB5KDC_ERR_KEY_EXPIRED;
+               ret = KRB5KDC_ERR_KEY_EXP;
        else if (NT_STATUS_EQUAL(nt_status, NT_STATUS_PASSWORD_EXPIRED))
-               ret = KRB5KDC_ERR_KEY_EXPIRED;
+               ret = KRB5KDC_ERR_KEY_EXP;
        else if (NT_STATUS_EQUAL(nt_status, NT_STATUS_ACCOUNT_EXPIRED))
                ret = KRB5KDC_ERR_CLIENT_REVOKED;
        else if (NT_STATUS_EQUAL(nt_status, NT_STATUS_ACCOUNT_DISABLED))