We have a lot of places where we have code like this:

        if (!NT_STATUS_IS_OK(cli_session_setup(cli, l_username,
                                               l_password, strlen(l_password),
                                               l_password, strlen(l_password),
                                               lp_workgroup()))) {
                d_printf("session setup failed: %s\n", cli_errstr(cli));
                return -1;
        }

This prints:
session setup failed: SUCCESS - 0

Instead of using cli_errstr(cli) we should use the NTSTATUS returned by the function.

At the same time we could use remove the cli_* calls from the if statement...

As a quick hack we might add a change that updates the info that cli_errstr()
uses.