getncchanges: Return correct denied REPL_SECRET error code

Signed-off-by: Garming Sam <garming@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

diff --git a/libcli/util/werror.h b/libcli/util/werror.h
index 7adda290c7880e6c06751855b02f09f021017b20..c25a4ab41381520cf490e1ec4dff7da3cb974f00 100644 (file)
--- a/libcli/util/werror.h
+++ b/libcli/util/werror.h
@@ -99,6 +99,8 @@ typedef uint32_t WERROR;
 #define WERR_ALERTED    W_ERROR(0x000002E3)
 #define WERR_INVALID_PRIMARY_GROUP      W_ERROR(0x0000051C)
 
+#define WERR_DS_DRA_SECRETS_DENIED                     W_ERROR(0x000021B6)
+
 #define WERR_DNS_ERROR_KEYMASTER_REQUIRED               W_ERROR(0x0000238D)
 #define WERR_DNS_ERROR_NOT_ALLOWED_ON_SIGNED_ZONE       W_ERROR(0x0000238E)
 #define WERR_DNS_ERROR_INVALID_NSEC3_PARAMETERS         W_ERROR(0x0000238F)

diff --git a/source4/rpc_server/drsuapi/getncchanges.c b/source4/rpc_server/drsuapi/getncchanges.c
index 09b6d89e4541955f75d5b6d21a58d150d02a3af5..6fbebd51fc4f502c6fadf32a4578390e331d5b99 100644 (file)
--- a/source4/rpc_server/drsuapi/getncchanges.c
+++ b/source4/rpc_server/drsuapi/getncchanges.c
@@ -1117,7 +1117,7 @@ denied:
        DEBUG(2,(__location__ ": Denied single object with secret replication for %s by RODC %s\n",
                 ldb_dn_get_linearized(obj_dn), ldb_dn_get_linearized(rodc_res->msgs[0]->dn)));
        ctr6->extended_ret = DRSUAPI_EXOP_ERR_NONE;
-       return WERR_DS_DRA_ACCESS_DENIED;
+       return WERR_DS_DRA_SECRETS_DENIED;
 
 allowed:
        DEBUG(2,(__location__ ": Allowed single object with secret replication for %s by %s %s\n",