# HG changeset patch
# User Marcus Granado <marcus.granado@xxxxxxxxxx>
# Date 1269607093 0
# Node ID 969859f9898636692b48271373351ba5d09cc945
# Parent  3a266c31aaf5b6a047ec4f9493f0c01da87bfbd1
CA-39450: during domainjoin error 0x57 is also permission-denied

Signed-off-by: Marcus Granado <marcus.granado@xxxxxxxxxxxxx>

diff -r 3a266c31aaf5 -r 969859f98986 ocaml/auth/extauth_plugin_ADlikewise.ml
--- a/ocaml/auth/extauth_plugin_ADlikewise.ml	Fri Mar 26 11:10:59 2010 +0000
+++ b/ocaml/auth/extauth_plugin_ADlikewise.ml	Fri Mar 26 12:38:13 2010 +0000
@@ -589,7 +589,8 @@
 		then begin
 			raise (Auth_signature.Auth_service_error (Auth_signature.E_CREDENTIALS,"The username or password is wrong."))
 		end
-		else if has_substr errmsg "(0x5)" (* Unknown error *)
+		else if has_substr errmsg "(0x5)" (* Windows ERROR_ACCESS_DENIED error *)
+			or has_substr errmsg "(0x57)" (* CA-39450 INVALID_PARAMETER meaning permission-denied *)
 		then begin (* this seems to be a not-enough-permission-to-join-the-domain error *)
 			raise (Auth_signature.Auth_service_error (Auth_signature.E_DENIED,"Permission denied. The user has no rights to join the domain or to modify the machine account in the Active Directory database."))
 		end