From 677808553136558e9580b041edb7937f6c6cd10e Mon Sep 17 00:00:00 2001
From: Simo Sorce <ssorce@redhat.com>
Date: Tue, 8 Apr 2008 09:25:48 -0400
Subject: [PATCH] The kpasswd keytab must not be owned by the dirsrv user. Fix
 copy&paste error.

---
 ipa-server/ipaserver/krbinstance.py | 2 --
 1 file changed, 2 deletions(-)

diff --git a/ipa-server/ipaserver/krbinstance.py b/ipa-server/ipaserver/krbinstance.py
index 778b4e2df..414568846 100644
--- a/ipa-server/ipaserver/krbinstance.py
+++ b/ipa-server/ipaserver/krbinstance.py
@@ -379,8 +379,6 @@ class KrbInstance(service.Service):
 
         self.fstore.backup_file("/etc/sysconfig/ipa_kpasswd")
         update_key_val_in_file("/etc/sysconfig/ipa_kpasswd", "export KRB5_KTNAME", "/var/kerberos/krb5kdc/kpasswd.keytab")
-        pent = pwd.getpwnam(self.ds_user)
-        os.chown("/var/kerberos/krb5kdc/kpasswd.keytab", pent.pw_uid, pent.pw_gid)
 
     def uninstall(self):
         self.kpasswd.uninstall()