auth/kerberos: Adjust log level for failed PAC signature verification
authorChristof Schmitt <christof.schmitt@us.ibm.com>
Mon, 30 Jul 2012 18:03:54 +0000 (11:03 -0700)
committerAndrew Bartlett <abartlet@samba.org>
Fri, 21 Sep 2012 02:49:32 +0000 (19:49 -0700)
With winbindd trying to verify the signature of an application provided
PAC, this message can be easily triggered. Adjust the debug level to
avoid filling up the logs.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
auth/kerberos/kerberos_pac.c

index 80f31d869f1231377d3f7d9b651104073e6b4158..81f7f21381b15b50b52182814c4e4f772c2a31e0 100644 (file)
@@ -322,7 +322,7 @@ NTSTATUS kerberos_decode_pac(TALLOC_CTX *mem_ctx,
                                         context,
                                         service_keyblock);
                if (ret) {
-                       DEBUG(1, ("PAC Decode: Failed to verify the service "
+                       DEBUG(5, ("PAC Decode: Failed to verify the service "
                                  "signature: %s\n", error_message(ret)));
                        return NT_STATUS_ACCESS_DENIED;
                }