[krbdev.mit.edu #8268] git commit

[Tom Yu via RT]

Allow clock skew in krb5 gss_accept_sec_context()

Remove an unnecessarily strict check for ticket expiration from
kg_accept_krb5() and kg_accept_dce().  Instead, add the maximum
allowable clock skew to the reported lifetime of acceptor contexts.

(cherry picked from commit b496ce4095133536e0ace36b74130e4b9ecb5e11)

https://github.com/krb5/krb5/commit/8c40b196ce00e653081f6c21f1dd2cbbcd2cc64e
Author: Greg Hudson <ghudson at mit.edu>
Committer: Tom Yu <tlyu at mit.edu>
Commit: 8c40b196ce00e653081f6c21f1dd2cbbcd2cc64e
Branch: krb5-1.14
 src/lib/gssapi/krb5/accept_sec_context.c |   18 ++++--------------
 src/lib/gssapi/krb5/inq_context.c        |    7 ++++++-
 2 files changed, 10 insertions(+), 15 deletions(-)