Oops, reverse sense of get-keys check...

This commit is contained in:
Nicolas Williams
2011-07-18 23:35:58 -05:00
parent f15745c60c
commit 2510d2d8fc

View File

@@ -79,7 +79,7 @@ kadmind_dispatch(void *kadm_handlep, krb5_boolean initial,
krb5_unparse_name_fixed(contextp->context, princ, name, sizeof(name)); krb5_unparse_name_fixed(contextp->context, princ, name, sizeof(name));
krb5_warnx(contextp->context, "%s: %s %s", client, op, name); krb5_warnx(contextp->context, "%s: %s %s", client, op, name);
ret = _kadm5_acl_check_permission(contextp, KADM5_PRIV_GET_KEYS, princ); ret = _kadm5_acl_check_permission(contextp, KADM5_PRIV_GET_KEYS, princ);
if (!ret) if (ret == 0)
keys_ok = 1; keys_ok = 1;
else else
ret = _kadm5_acl_check_permission(contextp, KADM5_PRIV_GET, princ); ret = _kadm5_acl_check_permission(contextp, KADM5_PRIV_GET, princ);
@@ -93,9 +93,9 @@ kadmind_dispatch(void *kadm_handlep, krb5_boolean initial,
krb5_store_int32(sp, ret); krb5_store_int32(sp, ret);
if(ret == 0){ if(ret == 0){
if (keys_ok) if (keys_ok)
kadm5_store_principal_ent_nokeys(sp, &ent);
else
kadm5_store_principal_ent(sp, &ent); kadm5_store_principal_ent(sp, &ent);
else
kadm5_store_principal_ent_nokeys(sp, &ent);
kadm5_free_principal_ent(kadm_handlep, &ent); kadm5_free_principal_ent(kadm_handlep, &ent);
} }
krb5_free_principal(contextp->context, princ); krb5_free_principal(contextp->context, princ);