reset uid back to the user before doing kerberised change password.
root permission is not needed and the kerberos library is paranoid about access control to the ticket file PR: bin/20779
This commit is contained in:
parent
1387b4dc3d
commit
a8f26efb45
@ -216,6 +216,7 @@ main(argc, argv)
|
||||
k = auth_getval("auth_list");
|
||||
if (k && strstr(k, "kerberos"))
|
||||
if(krb_get_lrealm(realm, 0) == KSUCCESS) {
|
||||
setuid(getuid());
|
||||
fprintf(stderr, "realm %s\n", realm);
|
||||
exit(krb_passwd(argv[0], iflag, rflag, uflag));
|
||||
}
|
||||
|
Loading…
Reference in New Issue
Block a user