[krbdev.mit.edu #6739] SVN Commit

[Tom Yu via RT]

pull up r24120, r24121 from trunk

 ------------------------------------------------------------------------
 r24120 | ghudson | 2010-06-08 12:14:24 -0400 (Tue, 08 Jun 2010) | 12 lines

 ticket: 6739
 target_version: 1.8.2
 tags: pullup

 Stop checking the current time against the context expiration time in
 the message wrap/unwrap functions in the krb5 GSS mech.  Heimdal
 doesn't do it, and it generally results in poor app behavior when a
 ticket expires.  In exchange, it doesn't provide much security benefit
 since it's not enforced across the board--for example, ssh sessions
 can persist beyond ticket expiration time since they don't use GSS to
 wrap payload data.

http://src.mit.edu/fisheye/changelog/krb5/?cs=24130
Commit By: tlyu
Revision: 24130
Changed Files:
U   branches/krb5-1-8/src/lib/gssapi/krb5/k5seal.c
U   branches/krb5-1-8/src/lib/gssapi/krb5/k5sealiov.c
U   branches/krb5-1-8/src/lib/gssapi/krb5/k5unseal.c
U   branches/krb5-1-8/src/lib/gssapi/krb5/k5unsealiov.c