Index: server/common/patches/openafs-scripts.patch
===================================================================
--- server/common/patches/openafs-scripts.patch	(revision 923)
+++ server/common/patches/openafs-scripts.patch	(revision 936)
@@ -127,4 +127,15 @@
      if (!afs_resourceinit_flag) {
  	return EIO;
+@@ -1804,6 +1804,10 @@
+     afs_int32 iterator;
+     int newStyle;
+ 
++    if (areq->uid == globalpag && areq->realuid != AFSAGENT_UID &&
++	areq->realuid != 0)
++	return 0;
++
+     AFS_STATCNT(PGetTokens);
+     if (!afs_resourceinit_flag)        /* afs daemons haven't started yet */
+        return EIO;             /* Inappropriate ioctl for device */
 @@ -1870,6 +1878,10 @@
      register afs_int32 i;