domtool-addcert handles inability to set an ACL entry

diff --git a/scripts/domtool-addcert b/scripts/domtool-addcert
index 0d23333..8d9e295 100755 (executable)
--- a/scripts/domtool-addcert
+++ b/scripts/domtool-addcert
@@ -16,7 +16,7 @@ CERTFILE=/afs/hcoop.net/common/etc/domtool/certs/$USER.pem
 mkdir $KEYDIR || echo Key directory already exists.
 openssl genrsa -out $KEYFILE
 chown -R domtool.domtool $KEYDIR
-fs sa $KEYDIR $USER read
+fs sa $KEYDIR $USER read || echo This must be a server principal.
 echo "." >$KEYIN
 echo "." >>$KEYIN
 echo "." >>$KEYIN