From 526f98308a58a2f1fd6bf70d56b9b8bb21bf0d55 Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Wed, 6 Nov 2013 15:54:17 +1300 Subject: [PATCH] dsdb: give a better error message and return code on failed password change Change-Id: I064a7e192caccbb5acc17ba385f1625425c176d1 Signed-off-by: Andrew Bartlett Reviewed-by: Stefan Metzmacher --- source4/dsdb/common/util.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/source4/dsdb/common/util.c b/source4/dsdb/common/util.c index 8cecf79e020..0ad0ea37ed7 100644 --- a/source4/dsdb/common/util.c +++ b/source4/dsdb/common/util.c @@ -2174,7 +2174,12 @@ NTSTATUS samdb_set_password(struct ldb_context *ldb, TALLOC_CTX *mem_ctx, } else if (ret == LDB_ERR_NO_SUCH_OBJECT) { /* don't let the caller know if an account doesn't exist */ status = NT_STATUS_WRONG_PASSWORD; + } else if (ret == LDB_ERR_INSUFFICIENT_ACCESS_RIGHTS) { + status = NT_STATUS_ACCESS_DENIED; } else if (ret != LDB_SUCCESS) { + DEBUG(1, ("Failed to set password on %s: %s\n", + ldb_dn_get_linearized(msg->dn), + ldb_errstring(ldb))); status = NT_STATUS_UNSUCCESSFUL; } -- 2.11.4.GIT