Add target UID to KRB5CCNAME when becoming.

[profile.git] / .profile.d / krb5.bashrc

diff --git a/.profile.d/krb5.bashrc b/.profile.d/krb5.bashrc
index 973101f..979bd71 100644 (file)
--- a/.profile.d/krb5.bashrc
+++ b/.profile.d/krb5.bashrc
@@ -59,7 +59,7 @@ if [ -z "$OLDSOLARIS" -a -z "$OLDREDHAT" ]; then
       # Don't break permissions of inherited cache under sudo.
       cache="${KRB5CCNAME##FILE:}"
       if [ ! "$cache" = "$KRB5CCNAME" ]; then
-        ccname="${cache/_$SUDO_UID/_sudo_$SUDO_UID}_$$"
+        ccname="${cache/_$SUDO_UID/_${UID}_sudo_$SUDO_UID}_$$"
         export KRB5CCNAME="FILE:$ccname"
         if cat "$cache" > "$ccname" 2>/dev/null; then
           klist -s 2>/dev/null && kinit -R 2>/dev/null || kinit $PRINCIPAL