From: Stefan Metzmacher <metze@samba.org>
Date: Fri, 20 Jan 2012 11:20:47 +0000 (+0100)
Subject: s3:kerberos_verify: ads_dedicated_keytab_verify_ticket() only needs read access
X-Git-Tag: tevent-0.9.15~288
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=4e444f00618161e11d13495d1402886c7e93866c;p=thirdparty%2Fsamba.git

s3:kerberos_verify: ads_dedicated_keytab_verify_ticket() only needs read access

metze
---

diff --git a/source3/libads/kerberos_verify.c b/source3/libads/kerberos_verify.c
index 6fa8f433672..0c44db988e6 100644
--- a/source3/libads/kerberos_verify.c
+++ b/source3/libads/kerberos_verify.c
@@ -58,7 +58,7 @@ static bool ads_dedicated_keytab_verify_ticket(krb5_context context,
 
 	ZERO_STRUCT(kt_entry);
 
-	ret = smb_krb5_open_keytab(context, lp_dedicated_keytab_file(), true,
+	ret = smb_krb5_open_keytab(context, lp_dedicated_keytab_file(), false,
 	    &keytab);
 	if (ret) {
 		DEBUG(1, ("smb_krb5_open_keytab failed (%s)\n",