Handle Kerberos credentials when becoming users other than root.
[profile.git] / opt / bin / become
index abe1b85..add9600 100755 (executable)
@@ -6,8 +6,9 @@ if [ -z "$user" ]; then
   exit 1
 fi
 
+PRINCIPAL=$(klist 2>/dev/null | sed -n 's/^Default principal: //p')
 BECOME="$HOME/.become"
 profile="$BECOME/$user"
 [ -f "$profile" ] || profile="$BECOME/all"
 
-exec sudo -H -u "$user" env BECOME_HOME="$HOME" /bin/bash --rcfile "$profile"
+exec sudo -H -u "$user" env BECOME_HOME="$HOME" PRINCIPAL=$PRINCIPAL /bin/bash --rcfile "$profile"