krb5 commit: Copy config entries to the ksu target ccache

Greg Hudson ghudson at MIT.EDU
Fri Aug 8 13:06:52 EDT 2014


https://github.com/krb5/krb5/commit/297496f0938955ba4aaf0ebecf4e393e527b8cbf
commit 297496f0938955ba4aaf0ebecf4e393e527b8cbf
Author: Nalin Dahyabhai <nalin at dahyabhai.net>
Date:   Tue Oct 29 16:27:20 2013 -0400

    Copy config entries to the ksu target ccache
    
    When we try to screen out expired creds while reading them from one
    ccache to eventually store in another, also keep configuration entries.
    
    ticket: 7986 (new)

 src/clients/ksu/ccache.c |    3 ++-
 1 files changed, 2 insertions(+), 1 deletions(-)

diff --git a/src/clients/ksu/ccache.c b/src/clients/ksu/ccache.c
index 4693bd4..0f9e042 100644
--- a/src/clients/ksu/ccache.c
+++ b/src/clients/ksu/ccache.c
@@ -219,7 +219,8 @@ krb5_error_code krb5_get_nonexp_tkts(context, cc, creds_array)
 
     while (!(retval = krb5_cc_next_cred(context, cc, &cur, &creds))){
 
-        if ((retval = krb5_check_exp(context, creds.times))){
+        if (!krb5_is_config_principal(context, creds.server) &&
+            (retval = krb5_check_exp(context, creds.times))){
             if (retval != KRB5KRB_AP_ERR_TKT_EXPIRED){
                 return retval;
             }


More information about the cvs-krb5 mailing list