summaryrefslogtreecommitdiff
path: root/source3/smbd/seal.c
diff options
context:
space:
mode:
authorJeremy Allison <jra@samba.org>2007-04-19 00:40:08 +0000
committerGerald (Jerry) Carter <jerry@samba.org>2007-10-10 12:19:28 -0500
commit226d96337fdb53f402569c12c6fd5b6a07123eb4 (patch)
tree62e323707277dd17e0216c9eca568281012bdd65 /source3/smbd/seal.c
parent1adbf4af06a71ffea493a3a3750d163f85f62c7f (diff)
downloadsamba-226d96337fdb53f402569c12c6fd5b6a07123eb4.tar.gz
samba-226d96337fdb53f402569c12c6fd5b6a07123eb4.tar.bz2
samba-226d96337fdb53f402569c12c6fd5b6a07123eb4.zip
r22351: Making progress in tests...
Jeremy. (This used to be commit f1726e04eb1d63387cf955c907fe077b2201a3ae)
Diffstat (limited to 'source3/smbd/seal.c')
-rw-r--r--source3/smbd/seal.c7
1 files changed, 7 insertions, 0 deletions
diff --git a/source3/smbd/seal.c b/source3/smbd/seal.c
index c0682a8201..7dd6e3d7bb 100644
--- a/source3/smbd/seal.c
+++ b/source3/smbd/seal.c
@@ -127,6 +127,12 @@ static NTSTATUS get_srv_gss_creds(const char *service,
return map_nt_error_from_gss(ret, min);
}
+ /*
+ * We're accessing the krb5.keytab file here.
+ * ensure we have permissions to do so.
+ */
+ become_root();
+
ret = gss_acquire_cred(&min,
srv_name,
GSS_C_INDEFINITE,
@@ -135,6 +141,7 @@ static NTSTATUS get_srv_gss_creds(const char *service,
p_srv_cred,
NULL,
NULL);
+ unbecome_root();
if (ret != GSS_S_COMPLETE) {
ADS_STATUS adss = ADS_ERROR_GSS(ret, min);