From b631ed7d0620748fd833c4cda4b421dc147d0906 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gregor.kleen@ifi.lmu.de>
Date: Wed, 14 Oct 2020 16:24:54 +0200
Subject: [PATCH] fix(auth): prettier active directory errors in help messages

---
 src/Auth/LDAP.hs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/Auth/LDAP.hs b/src/Auth/LDAP.hs
index c8e49ab16..471e59dd7 100644
--- a/src/Auth/LDAP.hs
+++ b/src/Auth/LDAP.hs
@@ -219,8 +219,8 @@ campusLogin pool mode = AuthPlugin{..}
             , isUnusualADError adError -> do
                 $logInfoS apName [st|#{campusIdent}: #{toPathPiece adError}|]
                 observeLoginOutcome apName LoginADInvalidCredentials
-                setSessionJson SessionError . InternalError $ toPathPiece adError
                 MsgRenderer mr <- liftHandler getMsgRenderer
+                setSessionJson SessionError . PermissionDenied . mr $ ADInvalidCredentials adError
                 loginErrorMessage (tp LoginR) . mr $ ADInvalidCredentials adError
           Right (Left bindErr) -> do
             case bindErr of