From 609e36de13247009373480be96d1acd305fb9bfd Mon Sep 17 00:00:00 2001
From: Nicolas Williams <nico@twosigma.com>
Date: Sun, 8 Feb 2026 01:30:28 -0600
Subject: [PATCH] krb5: Only lock keytabs to write to them (fix #1319)

---
 lib/krb5/keytab_file.c | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/lib/krb5/keytab_file.c b/lib/krb5/keytab_file.c
index 61b5d6d29..aed17b2de 100644
--- a/lib/krb5/keytab_file.c
+++ b/lib/krb5/keytab_file.c
@@ -381,10 +381,12 @@ fkt_start_seq_get_int(krb5_context context,
 	return ret;
     }
     rk_cloexec(c->fd);
-    ret = _krb5_xlock(context, c->fd, exclusive, d->filename);
-    if (ret) {
-	close(c->fd);
-	return ret;
+    if (exclusive) {
+	ret = _krb5_xlock(context, c->fd, exclusive, d->filename);
+	if (ret) {
+	    close(c->fd);
+	    return ret;
+	}
     }
     if ((flags & O_ACCMODE) == O_RDWR && (flags & O_APPEND))
         stdio_mode = "ab+";