From: Jeremy Allison <jra@samba.org>
Date: Thu, 19 Apr 2007 00:40:08 +0000 (+0000)
Subject: r22351: Making progress in tests...
X-Git-Tag: samba-misc-tags/initial-v3-0-unstable~668
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=f1726e04eb1d63387cf955c907fe077b2201a3ae;p=thirdparty%2Fsamba.git

r22351: Making progress in tests...
Jeremy.
---

diff --git a/source/smbd/seal.c b/source/smbd/seal.c
index c0682a8201e..7dd6e3d7bbf 100644
--- a/source/smbd/seal.c
+++ b/source/smbd/seal.c
@@ -127,6 +127,12 @@ static NTSTATUS get_srv_gss_creds(const char *service,
 		return map_nt_error_from_gss(ret, min);
 	}
 
+	/*
+	 * We're accessing the krb5.keytab file here.
+ 	 * ensure we have permissions to do so.
+ 	 */
+	become_root();
+
 	ret = gss_acquire_cred(&min,
 				srv_name,
 				GSS_C_INDEFINITE,
@@ -135,6 +141,7 @@ static NTSTATUS get_srv_gss_creds(const char *service,
 				p_srv_cred,
 				NULL,
 				NULL);
+	unbecome_root();
 
 	if (ret != GSS_S_COMPLETE) {
 		ADS_STATUS adss = ADS_ERROR_GSS(ret, min);