KEYRING ccache can hide valid tickets when it contains expired ticket

Ao Shen sa22 at mails.tsinghua.edu.cn
Mon Oct 12 03:34:48 EDT 2026


On Mon, Oct 12, 2026 at 02:57:16AM +0800, Greg Hudson wrote:
> Thanks for investigating and reporting this bug.  I confirmed that I can
> reproduce the error (using kvno on a server principal created with -maxlife
> 1m) and filed a PR to fix it:
> 
> https://github.com/krb5/krb5/pull/1546

Thanks for your reply. I have tried the patch locally and can confirm that it
fixed the issue.

--

Ao Shen



More information about the Kerberos mailing list