From 0e11a87090f46695024a67eed58dbb5aaa7be9a3 Mon Sep 17 00:00:00 2001
From: Tomas Babej <tbabej@redhat.com>
Date: Wed, 29 Apr 2015 08:16:03 +0200
Subject: winsync-migrate: Require root privileges

https://fedorahosted.org/freeipa/ticket/4524

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
---
 ipaserver/winsync_migrate/base.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/ipaserver/winsync_migrate/base.py b/ipaserver/winsync_migrate/base.py
index 60c2cad66..936a7eee3 100644
--- a/ipaserver/winsync_migrate/base.py
+++ b/ipaserver/winsync_migrate/base.py
@@ -71,7 +71,8 @@ class MigrateWinsync(admintool.AdminTool):
               the realm passed via --realm option
         """
 
-        super(MigrateWinsync, self).validate_options()
+        # Require root to have access to HTTP keytab
+        super(MigrateWinsync, self).validate_options(needs_root=True)
 
         if self.options.realm is None:
             raise admintool.ScriptError(
-- 
cgit