[krbdev.mit.edu #8268] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Fri Oct 23 12:40:36 EDT 2015


Allow clock skew in krb5 gss_accept_sec_context()

Remove an unnecessarily strict check for ticket expiration from
kg_accept_krb5() and kg_accept_dce().  Instead, add the maximum
allowable clock skew to the reported lifetime of acceptor contexts.

https://github.com/krb5/krb5/commit/b496ce4095133536e0ace36b74130e4b9ecb5e11
Author: Greg Hudson <ghudson at mit.edu>
Commit: b496ce4095133536e0ace36b74130e4b9ecb5e11
Branch: master
 src/lib/gssapi/krb5/accept_sec_context.c |   18 ++++--------------
 src/lib/gssapi/krb5/inq_context.c        |    7 ++++++-
 2 files changed, 10 insertions(+), 15 deletions(-)



More information about the krb5-bugs mailing list