From 21b7863935b76442ab8fdb985fcca8a63adb2554 Mon Sep 17 00:00:00 2001
From: "Roland C. Dowdeswell" <elric@imrryr.org>
Date: Fri, 18 May 2012 17:13:30 +0100
Subject: [PATCH] kadm5_s_get_principals() is a read only operation, so open
 the HDB in r/o mode.

---
 lib/kadm5/get_princs_s.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/kadm5/get_princs_s.c b/lib/kadm5/get_princs_s.c
index 26c3d6729..0e8f92268 100644
--- a/lib/kadm5/get_princs_s.c
+++ b/lib/kadm5/get_princs_s.c
@@ -87,7 +87,7 @@ kadm5_s_get_principals(void *server_handle,
     kadm5_ret_t ret;
 
     if (!context->keep_open) {
-	ret = context->db->hdb_open(context->context, context->db, O_RDWR, 0);
+	ret = context->db->hdb_open(context->context, context->db, O_RDONLY, 0);
 	if(ret) {
 	    krb5_warn(context->context, ret, "opening database");
 	    return ret;
-- 
2.11.4.GIT