r17999: No need to prevent others from reading. Use 755 instead

of 700, and 644 instead of 600. Reading might help
debugging.
Jeremy.

diff --git a/source/libads/kerberos.c b/source/libads/kerberos.c
index a077ce1fce6e22a93b24af8c670dc972bbcc394b..79196f87a79fdbd33422398784caf36d4af7bf9f 100644 (file)
--- a/source/libads/kerberos.c
+++ b/source/libads/kerberos.c
@@ -484,7 +484,7 @@ BOOL create_local_private_krb5_conf_for_domain(const char *realm, const char *do
        if (!dname) {
                return False;
        }
-       if (mkdir(dname, 0700)==-1) {
+       if (mkdir(dname, 0755)==-1) {
                DEBUG(0,("create_local_private_krb5_conf_for_domain: "
                        "failed to create directory %s. Error was %s\n",
                        dname, strerror(errno) ));
@@ -519,7 +519,7 @@ BOOL create_local_private_krb5_conf_for_domain(const char *realm, const char *do
        while (loopcount < 10) {
                SMB_STRUCT_STAT st;
 
-               xfp = x_fopen(fname, O_CREAT|O_WRONLY, 0600);
+               xfp = x_fopen(fname, O_CREAT|O_WRONLY, 0644);
                if (!xfp) {
                        TALLOC_FREE(dname);
                        return False;