From bf9d4c598408ff7ced3b085163ae0a41d02f0e52 Mon Sep 17 00:00:00 2001
From: Rob Crittenden <rcritten@redhat.com>
Date: Thu, 17 Dec 2009 14:29:54 -0500
Subject: Need to supsend looping through the keytab entries when doing a
 delete.

---
 ipa-client/ipa-rmkeytab.c | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'ipa-client')

diff --git a/ipa-client/ipa-rmkeytab.c b/ipa-client/ipa-rmkeytab.c
index d3f1ded37..245c9f2db 100644
--- a/ipa-client/ipa-rmkeytab.c
+++ b/ipa-client/ipa-rmkeytab.c
@@ -116,6 +116,11 @@ remove_realm(krb5_context context, krb5_keytab ktid, const char *realm, int debu
             goto done;
         }
 
+
+        /* keytab entries are locked when looping. Temporarily suspend
+         * the looping. */
+        krb5_kt_end_seq_get(context, ktid, &kt_cursor);
+
         if (strstr(entry_princ_s, realm) != NULL) {
             rval = remove_principal(context, ktid, entry_princ_s, debug);
             if (rval != 0)
-- 
cgit