From ede20cf95e7b5be4ea60481e7197504f7a35bc5a Mon Sep 17 00:00:00 2001
From: Michael Spang <mspang@csclub.uwaterloo.ca>
Date: Tue, 20 May 2008 18:49:51 -0400
Subject: [PATCH] Auth as ceo/admin for zfsaddhomedir

---
 src/addhomedir.c | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/src/addhomedir.c b/src/addhomedir.c
index 5c396ea..a6bdde4 100644
--- a/src/addhomedir.c
+++ b/src/addhomedir.c
@@ -11,6 +11,7 @@
 #include "addhomedir.h"
 #include "util.h"
 #include "config.h"
+#include "krb5.h"
 
 int ceo_create_home(char *homedir, uid_t uid, gid_t gid, char *mode, char *acl) {
     char uid_str[16], gid_str[16];
@@ -21,10 +22,15 @@ int ceo_create_home(char *homedir, uid_t uid, gid_t gid, char *mode, char *acl)
     snprintf(uid_str, sizeof(uid_str), "%ld", (long)uid);
     snprintf(gid_str, sizeof(gid_str), "%ld", (long)uid);
     if(!acl[0]) acl = NULL;
+
+    ceo_krb5_auth(admin_bind_userid, admin_bind_keytab);
+
     if(spawnv("/usr/bin/ssh", zfs_argv)) {
         errorpe("failed calling zfsaddhomedir for %s", homedir);
         return -1;
     }
 
+    ceo_krb5_deauth();
+
     return 0;
 }