- (!strcmp("dmfl", q->shortname))) &&
- (!strcmp("USER", argv[1]))) {
- if (*(int *)argv[2] == client_id) return(MR_SUCCESS);
- /* if update_list, don't allow them to change the GID */
+ (!strcmp("dmfl", q->shortname)))) {
+ if (!strcmp("USER", argv[1]) && *(int *)argv[2] == cl->users_id)
+ return(MR_SUCCESS);
+ if (!strcmp("KERBEROS", argv[1]) && *(int *)argv[2] == -cl->client_id)
+ return(MR_SUCCESS);
+ /* if update_list, don't allow them to change the GID or rename to
+ a username other than their own */