Index: crypto/heimdal/lib/krb5/kuserok.c
===================================================================
--- crypto/heimdal/lib/krb5/kuserok.c
+++ crypto/heimdal/lib/krb5/kuserok.c
@@ -276,7 +276,7 @@
 	return TRUE;
     }
 
-    if(ret != ENOENT)
+    if(ret != ENOENT && ret != EACCES && ret != EPERM)
 	found_file = TRUE;
 
     strlcat(buf, ".d", buflen);
@@ -285,7 +285,7 @@
     if(ret == 0 && result == TRUE)
 	return TRUE;
 
-    if(ret != ENOENT && ret != ENOTDIR)
+    if(ret != ENOENT && ret != ENOTDIR && ret != EACCES && ret != EPERM)
 	found_file = TRUE;
 
     /* finally if no files exist, allow all principals matching