s3:kerberos_verify: ads_dedicated_keytab_verify_ticket() only needs read access

metze

diff --git a/source3/libads/kerberos_verify.c b/source3/libads/kerberos_verify.c
index 6fa8f433672a31fa55f877cb312422f3e4dc900f..0c44db988e62e364816906388470339a5c9c673a 100644 (file)
--- a/source3/libads/kerberos_verify.c
+++ b/source3/libads/kerberos_verify.c
@@ -58,7 +58,7 @@ static bool ads_dedicated_keytab_verify_ticket(krb5_context context,
 
        ZERO_STRUCT(kt_entry);
 
-       ret = smb_krb5_open_keytab(context, lp_dedicated_keytab_file(), true,
+       ret = smb_krb5_open_keytab(context, lp_dedicated_keytab_file(), false,
            &keytab);
        if (ret) {
                DEBUG(1, ("smb_krb5_open_keytab failed (%s)\n",