how to check tkt for expiration including clockskew?
Chris Hecker
checker at d6.com
Thu Aug 11 05:52:23 EDT 2011
So, the clockskew is in the context, which is an opaque struct (unless
you include k5-int.h). All the times validation functions seem to be
krb5int_*. ksu and others include k5-int.h so they can make their own
check_exp function. What's a well-behaved app supposed to do to check
for ticket expiration? Should I hard code 5*60 in there because I know
I don't have a different value set?
Thanks,
Chris
More information about the Kerberos
mailing list