From: Greg Hudson <ghudson@mit.edu>
Date: Tue, 17 Feb 2009 17:32:19 +0000 (+0000)
Subject: Revert the fopen part of the previous krb5_kuserok change, but keep
X-Git-Tag: krb5-1.8-alpha1~627
X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=d9f547b4670abb3aa5cba348ce44cc0c60d57071;p=krb5.git

Revert the fopen part of the previous krb5_kuserok change, but keep
the string-handling change.  It introduced an unwanted behavior change
when .k5login was detectable but unreadable.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22011 dc483132-0cff-0310-8789-dd5450dbe970
---

diff --git a/src/lib/krb5/os/kuserok.c b/src/lib/krb5/os/kuserok.c
index 489b24791..f76010dc9 100644
--- a/src/lib/krb5/os/kuserok.c
+++ b/src/lib/krb5/os/kuserok.c
@@ -90,13 +90,12 @@ krb5_kuserok(krb5_context context, krb5_principal principal, const char *luser)
     if (SNPRINTF_OVERFLOW(result, sizeof(pbuf)))
 	return(FALSE);
 
-    fp = fopen(pbuf, "r");
-    if (!fp) {
+    if (access(pbuf, F_OK)) {	 /* not accessible */
 	/*
-	 * If he's trying to log in as himself, and there is no
-	 * readable .k5login file, let him.  To find out, call
+	 * if he's trying to log in as himself, and there is no .k5login file,
+	 * let him.  To find out, call
 	 * krb5_aname_to_localname to convert the principal to a name
-	 * which we can string compare.
+	 * which we can string compare. 
 	 */
 	if (!(krb5_aname_to_localname(context, principal,
 				      sizeof(kuser), kuser))