From 226d96337fdb53f402569c12c6fd5b6a07123eb4 Mon Sep 17 00:00:00 2001
From: Jeremy Allison <jra@samba.org>
Date: Thu, 19 Apr 2007 00:40:08 +0000
Subject: r22351: Making progress in tests... Jeremy. (This used to be commit
 f1726e04eb1d63387cf955c907fe077b2201a3ae)

---
 source3/smbd/seal.c | 7 +++++++
 1 file changed, 7 insertions(+)

(limited to 'source3')

diff --git a/source3/smbd/seal.c b/source3/smbd/seal.c
index c0682a8201..7dd6e3d7bb 100644
--- a/source3/smbd/seal.c
+++ b/source3/smbd/seal.c
@@ -127,6 +127,12 @@ static NTSTATUS get_srv_gss_creds(const char *service,
 		return map_nt_error_from_gss(ret, min);
 	}
 
+	/*
+	 * We're accessing the krb5.keytab file here.
+ 	 * ensure we have permissions to do so.
+ 	 */
+	become_root();
+
 	ret = gss_acquire_cred(&min,
 				srv_name,
 				GSS_C_INDEFINITE,
@@ -135,6 +141,7 @@ static NTSTATUS get_srv_gss_creds(const char *service,
 				p_srv_cred,
 				NULL,
 				NULL);
+	unbecome_root();
 
 	if (ret != GSS_S_COMPLETE) {
 		ADS_STATUS adss = ADS_ERROR_GSS(ret, min);
-- 
cgit