From 64d2701b1e83735852640c70ebc54c0b6ffb2daf Mon Sep 17 00:00:00 2001 From: Marc Muehlfeld Date: Wed, 4 Nov 2015 20:47:24 +0100 Subject: [PATCH] Changing log level of two entries to from 1 to 3 On domain members using RFC2307, machine acccounts without an uidNumber attribute are not retrieved via idmap_ad. This leads to many of the following two error messages: Username DOMAIN\machineaccountname$ is invalid on this system and Failed to map kerberos principal to system user (NT_STATUS_LOGON_FAILURE) Machine accounts don't have an uidNumber attribute, if not set manually. To avoid flooding the logs, raising the level 1 to 3 for these messages. Bugreport: https://bugzilla.samba.org/show_bug.cgi?id=9912 Signed-off-by: Marc Muehlfeld --- source3/auth/auth_generic.c | 2 +- source3/auth/user_krb5.c | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/source3/auth/auth_generic.c b/source3/auth/auth_generic.c index 1da4961..ad7bf2f 100644 --- a/source3/auth/auth_generic.c +++ b/source3/auth/auth_generic.c @@ -95,7 +95,7 @@ static NTSTATUS auth3_generate_session_info_pac(struct auth4_context *auth_ctx, &ntuser, &ntdomain, &username, &pw); if (!NT_STATUS_IS_OK(status)) { - DEBUG(1, ("Failed to map kerberos principal to system user " + DEBUG(3, ("Failed to map kerberos principal to system user " "(%s)\n", nt_errstr(status))); status = NT_STATUS_ACCESS_DENIED; goto done; diff --git a/source3/auth/user_krb5.c b/source3/auth/user_krb5.c index 7442ea4..7ffd7ab 100644 --- a/source3/auth/user_krb5.c +++ b/source3/auth/user_krb5.c @@ -160,7 +160,7 @@ NTSTATUS get_user_from_kerberos_info(TALLOC_CTX *mem_ctx, /* extra sanity check that the guest account is valid */ if (!pw) { - DEBUG(1, ("Username %s is invalid on this system\n", + DEBUG(3, ("Username %s is invalid on this system\n", fuser)); return NT_STATUS_LOGON_FAILURE; } -- 2.5.0