From: Nalin Dahyabhai <nalin@dahyabhai.net>
Date: Tue, 29 Oct 2013 20:27:20 +0000 (-0400)
Subject: Copy config entries to the ksu target ccache
X-Git-Tag: krb5-1.13-alpha1~5
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=297496f0938955ba4aaf0ebecf4e393e527b8cbf;p=thirdparty%2Fkrb5.git

Copy config entries to the ksu target ccache

When we try to screen out expired creds while reading them from one
ccache to eventually store in another, also keep configuration entries.

ticket: 7986 (new)
---

diff --git a/src/clients/ksu/ccache.c b/src/clients/ksu/ccache.c
index 4693bd4252..0f9e0427b9 100644
--- a/src/clients/ksu/ccache.c
+++ b/src/clients/ksu/ccache.c
@@ -219,7 +219,8 @@ krb5_error_code krb5_get_nonexp_tkts(context, cc, creds_array)
 
     while (!(retval = krb5_cc_next_cred(context, cc, &cur, &creds))){
 
-        if ((retval = krb5_check_exp(context, creds.times))){
+        if (!krb5_is_config_principal(context, creds.server) &&
+            (retval = krb5_check_exp(context, creds.times))){
             if (retval != KRB5KRB_AP_ERR_TKT_EXPIRED){
                 return retval;
             }