s4/dns_server: error codes for failing MAC verification in TSIG requests
commit721a858376adfbb125b9f168727fd5db4d8e5621
authorRalph Boehme <slow@samba.org>
Mon, 30 May 2016 14:40:45 +0000 (30 16:40 +0200)
committerKarolin Seeger <kseeger@samba.org>
Thu, 23 Jun 2016 10:10:22 +0000 (23 12:10 +0200)
treeaaffcc5dbc0a8516f934607ec9c4e4185feac81f
parentf116a7bdeb24f69d96da0dd49b5079184f9ff5c3
s4/dns_server: error codes for failing MAC verification in TSIG requests

According to RFC 2845 "4.5.3. MAC check and error handling" we must
return NOTAUTH and DNS_RCODE_BADSIG when MAC verification fails.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=11520

Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Garming Sam <garming@catalyst.net.nz>
(cherry picked from commit 8b4a2dcf38e9f38bb99bd1daa5e0d5da176a1e15)
source4/dns_server/dns_crypto.c