bug?: erroneous start time for max renewable life check

Love Hörnquist Åstrand lha at kth.se
Wed Jun 9 13:02:36 EDT 2010


9 jun 2010 kl. 09:15 skrev Greg Hudson:

> I think the most practical fix for your problem is to make the Heimdal
> KDC more forgiving--it should not squash the validity end time of the
> ticket simply because it calculated a lower maximum renewable end time.
> If I were a Heimdal developer, I'd propose removing this line from
> krb5tgs.c:
> 
>        et.endtime = min(et.endtime, *et.renew_till);

Just change the max renew time to be longer then the max lifetime on the principal ?

Love




More information about the Kerberos mailing list