Don't allow renewable_ok to be set if the renew liftime is greater than the ticket lifetime. To generate a diff of this commit: cvs diff -r5.411 -r5.412 krb5/src/lib/krb5/krb/ChangeLog cvs diff -r5.107 -r5.108 krb5/src/lib/krb5/krb/get_in_tkt.c