]> git.ipfire.org Git - thirdparty/krb5.git/commit
Allow clock skew in krb5 gss_accept_sec_context() 344/head
authorGreg Hudson <ghudson@mit.edu>
Thu, 8 Oct 2015 12:53:37 +0000 (08:53 -0400)
committerGreg Hudson <ghudson@mit.edu>
Fri, 23 Oct 2015 16:13:56 +0000 (12:13 -0400)
commitb496ce4095133536e0ace36b74130e4b9ecb5e11
tree4109e37f213e5bd26dd42d645c8f0a95c0e22555
parent7eee546db10e907666e02fdded4f512e8d0faf4c
Allow clock skew in krb5 gss_accept_sec_context()

Remove an unnecessarily strict check for ticket expiration from
kg_accept_krb5() and kg_accept_dce().  Instead, add the maximum
allowable clock skew to the reported lifetime of acceptor contexts.

ticket: 8268
target_version: 1.14
tags: pullup
src/lib/gssapi/krb5/accept_sec_context.c
src/lib/gssapi/krb5/inq_context.c