From d8a56966bc59b873f861b2ad73e90b05afe7565a Mon Sep 17 00:00:00 2001
From: Dietmar Maurer <dietmar@proxmox.com>
Date: Tue, 17 Jan 2012 06:42:42 +0100
Subject: [PATCH] fix bug #85: allow root@pam to generate tickets for other
 users

---
 Makefile                  | 2 +-
 PVE/API2/AccessControl.pm | 3 ++-
 changelog.Debian          | 6 ++++++
 3 files changed, 9 insertions(+), 2 deletions(-)

diff --git a/Makefile b/Makefile
index 9b4c4d0..bf294ca 100644
--- a/Makefile
+++ b/Makefile
@@ -2,7 +2,7 @@ RELEASE=2.0
 
 VERSION=1.0
 PACKAGE=libpve-access-control
-PKGREL=6
+PKGREL=7
 
 DESTDIR=
 PREFIX=/usr
diff --git a/PVE/API2/AccessControl.pm b/PVE/API2/AccessControl.pm
index 10b6161..3d7c80d 100644
--- a/PVE/API2/AccessControl.pm
+++ b/PVE/API2/AccessControl.pm
@@ -150,8 +150,9 @@ __PACKAGE__->register_method ({
 
 	    my $tmp;
 	    if (($tmp = PVE::AccessControl::verify_ticket($param->{password}, 1)) &&
-		($tmp eq $username)) {
+		($tmp eq 'root@pam' || $tmp eq $username)) {
 		# got valid ticket
+		# Note: root@pam can create tickets for other users
 	    } else {
 		$username = PVE::AccessControl::authenticate_user($username, $param->{password});
 	    }
diff --git a/changelog.Debian b/changelog.Debian
index bc7426c..54bb9b8 100644
--- a/changelog.Debian
+++ b/changelog.Debian
@@ -1,3 +1,9 @@
+libpve-access-control (1.0-7) unstable; urgency=low
+
+  * fix bug #85: allow root@pam to generate tickets for other users
+
+ -- Proxmox Support Team <support@proxmox.com>  Tue, 17 Jan 2012 06:40:18 +0100
+
 libpve-access-control (1.0-6) unstable; urgency=low
 
   * API change: allow to filter enabled/disabled users.
-- 
2.39.2