reset uid back to the user before doing kerberised change password.
root permission is not needed and the kerberos library is paranoid about access control to the ticket file PR: bin/20779
This commit is contained in:
parent
02c9ff5b94
commit
1d4589b693
@ -216,6 +216,7 @@ main(argc, argv)
|
|||||||
k = auth_getval("auth_list");
|
k = auth_getval("auth_list");
|
||||||
if (k && strstr(k, "kerberos"))
|
if (k && strstr(k, "kerberos"))
|
||||||
if(krb_get_lrealm(realm, 0) == KSUCCESS) {
|
if(krb_get_lrealm(realm, 0) == KSUCCESS) {
|
||||||
|
setuid(getuid());
|
||||||
fprintf(stderr, "realm %s\n", realm);
|
fprintf(stderr, "realm %s\n", realm);
|
||||||
exit(krb_passwd(argv[0], iflag, rflag, uflag));
|
exit(krb_passwd(argv[0], iflag, rflag, uflag));
|
||||||
}
|
}
|
||||||
|
Loading…
x
Reference in New Issue
Block a user