diff options
| author | Jeremy Allison <jra@samba.org> | 2007-04-19 00:40:08 +0000 |
|---|---|---|
| committer | Gerald (Jerry) Carter <jerry@samba.org> | 2007-10-10 12:19:28 -0500 |
| commit | 226d96337fdb53f402569c12c6fd5b6a07123eb4 (patch) | |
| tree | 62e323707277dd17e0216c9eca568281012bdd65 | |
| parent | 1adbf4af06a71ffea493a3a3750d163f85f62c7f (diff) | |
| download | samba-226d96337fdb53f402569c12c6fd5b6a07123eb4.tar.gz samba-226d96337fdb53f402569c12c6fd5b6a07123eb4.tar.bz2 samba-226d96337fdb53f402569c12c6fd5b6a07123eb4.zip | |
r22351: Making progress in tests...
Jeremy.
(This used to be commit f1726e04eb1d63387cf955c907fe077b2201a3ae)
| -rw-r--r-- | source3/smbd/seal.c | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/source3/smbd/seal.c b/source3/smbd/seal.c index c0682a8201..7dd6e3d7bb 100644 --- a/source3/smbd/seal.c +++ b/source3/smbd/seal.c @@ -127,6 +127,12 @@ static NTSTATUS get_srv_gss_creds(const char *service, return map_nt_error_from_gss(ret, min); } + /* + * We're accessing the krb5.keytab file here. + * ensure we have permissions to do so. + */ + become_root(); + ret = gss_acquire_cred(&min, srv_name, GSS_C_INDEFINITE, @@ -135,6 +141,7 @@ static NTSTATUS get_srv_gss_creds(const char *service, p_srv_cred, NULL, NULL); + unbecome_root(); if (ret != GSS_S_COMPLETE) { ADS_STATUS adss = ADS_ERROR_GSS(ret, min); |