From ddeb85fd7285224a5b39ae2cfa40a750191ad84e Mon Sep 17 00:00:00 2001
From: Stefan Metzmacher <metze@samba.org>
Date: Thu, 20 Feb 2025 14:23:05 +0100
Subject: [PATCH] s4:kdc: don't return ENOENT from
 samba_kdc_get_claims_data[_from_pac]

This will matter in the next commits.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
---
 source4/kdc/pac-glue.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/source4/kdc/pac-glue.c b/source4/kdc/pac-glue.c
index 644cc526318..5c179049b38 100644
--- a/source4/kdc/pac-glue.c
+++ b/source4/kdc/pac-glue.c
@@ -2918,6 +2918,8 @@ krb5_error_code samba_kdc_get_claims_data_from_pac(TALLOC_CTX *mem_ctx,
 				   &claims_info);
 	if (code == ENOENT) {
 		/* OK. */
+		krb5_clear_error_message(context);
+		code = 0;
 	} else if (code != 0) {
 		DBG_ERR("Error getting CLIENT_CLAIMS_INFO from PAC\n");
 		goto out;