From 3ef5e6554b9847740910c774bf6b81d5957e40d9 Mon Sep 17 00:00:00 2001
From: Joseph Sutton <josephsutton@catalyst.net.nz>
Date: Mon, 21 Aug 2023 13:51:27 +1200
Subject: [PATCH] s4:kdc: Handle invalid enum values

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
---
 source4/kdc/pac-glue.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/source4/kdc/pac-glue.c b/source4/kdc/pac-glue.c
index 1a551191e59..44e3b931ee0 100644
--- a/source4/kdc/pac-glue.c
+++ b/source4/kdc/pac-glue.c
@@ -838,6 +838,8 @@ static NTSTATUS samba_add_asserted_identity(enum samba_asserted_identity ai,
 		break;
 	case SAMBA_ASSERTED_IDENTITY_IGNORE:
 		return NT_STATUS_OK;
+	default:
+		return NT_STATUS_INVALID_PARAMETER;
 	}
 
 	if (!dom_sid_parse(sid_str, &ai_sid)) {