bug?: erroneous start time for max renewable life check
Love Hörnquist Åstrand
lha at kth.se
Wed Jun 9 13:02:36 EDT 2010
9 jun 2010 kl. 09:15 skrev Greg Hudson:
> I think the most practical fix for your problem is to make the Heimdal
> KDC more forgiving--it should not squash the validity end time of the
> ticket simply because it calculated a lower maximum renewable end time.
> If I were a Heimdal developer, I'd propose removing this line from
> krb5tgs.c:
>
> et.endtime = min(et.endtime, *et.renew_till);
Just change the max renew time to be longer then the max lifetime on the principal ?
Love
More information about the Kerberos
mailing list