r18241: If replacing the krb5.conf, ensure it's readable.

Jeremy.

diff --git a/source/libads/kerberos.c b/source/libads/kerberos.c
index 7eb0bdc145d02b766ab3028a0afa626b127e3a09..6374c515ad679333e378a95356aeb0ee6320bbcb 100644 (file)
--- a/source/libads/kerberos.c
+++ b/source/libads/kerberos.c
@@ -580,6 +580,16 @@ BOOL create_local_private_krb5_conf_for_domain(const char *realm, const char *do
                        tmpname, strerror(errno) ));
        }
 
+       if (fchmod(fd, 0644)==-1) {
+               DEBUG(0,("create_local_private_krb5_conf_for_domain: fchmod failed for %s."
+                       " Errno %s\n",
+                       tmpname, strerror(errno) ));
+               unlink(tmpname);
+               close(fd);
+               TALLOC_FREE(dname);
+               return False;
+       }
+
        ret = write(fd, file_contents, flen);
        if (flen != ret) {
                DEBUG(0,("create_local_private_krb5_conf_for_domain: write failed,"