svn rev #24900: trunk/src/lib/gssapi/krb5/

ghudson@MIT.EDU ghudson at MIT.EDU
Mon Apr 25 18:01:47 EDT 2011


http://src.mit.edu/fisheye/changelog/krb5/?cs=24900
Commit By: ghudson
Log Message:
ticket: 6902

Correctly set the expiration field of impersonated credentials in
kg_compose_deleg_cred(), so we can find them in the cache in
init_sec_context.  From aberry at likewise.com.



Changed Files:
U   trunk/src/lib/gssapi/krb5/s4u_gss_glue.c
Modified: trunk/src/lib/gssapi/krb5/s4u_gss_glue.c
===================================================================
--- trunk/src/lib/gssapi/krb5/s4u_gss_glue.c	2011-04-25 17:28:42 UTC (rev 24899)
+++ trunk/src/lib/gssapi/krb5/s4u_gss_glue.c	2011-04-25 22:01:47 UTC (rev 24900)
@@ -218,7 +218,7 @@
     cred->usage = GSS_C_INITIATE;
     cred->proxy_cred = !!(subject_creds->ticket_flags & TKT_FLG_FORWARDABLE);
 
-    cred->tgt_expire = impersonator_cred->tgt_expire;
+    cred->tgt_expire = subject_creds->times.endtime;
 
     code = kg_init_name(context, subject_creds->client, NULL, NULL, NULL, 0,
                         &cred->name);




More information about the cvs-krb5 mailing list