how to check tkt for expiration including clockskew?

Chris Hecker checker at d6.com
Thu Aug 11 05:52:23 EDT 2011


So, the clockskew is in the context, which is an opaque struct (unless 
you include k5-int.h).  All the times validation functions seem to be 
krb5int_*.  ksu and others include k5-int.h so they can make their own 
check_exp function.  What's a well-behaved app supposed to do to check 
for ticket expiration?  Should I hard code 5*60 in there because I know 
I don't have a different value set?

Thanks,
Chris



More information about the Kerberos mailing list