access: set the temporary ticket lifetime between 30 and 3600 seconds

diff --git a/src/access.c b/src/access.c
index 02953765b55aa24edfca1b304a888436052043ee..abb4d926369796e0edbb77e588fbcd9a53eb2b3a 100644 (file)
--- a/src/access.c
+++ b/src/access.c
@@ -122,7 +122,7 @@ access_ticket_timeout(void *aux)
 const char *
 access_ticket_create(const char *resource, access_t *a)
 {
-  const int64_t lifetime = sec2mono(config.ticket_expires);
+  const int64_t lifetime = sec2mono(MINMAX(config.ticket_expires, 30, 3600));
   uint8_t buf[20];
   char id[41];
   uint_fast32_t i;

diff --git a/src/config.c b/src/config.c
index cd4d31046c5aa21490c788225ae37af2724e536a..127acc91b296e19603b56f20449e31b210d0a1c9 100644 (file)
--- a/src/config.c
+++ b/src/config.c
@@ -2396,7 +2396,7 @@ const idclass_t config_class = {
     },
     {
       .type   = PT_U32,
-      .intextra = INTEXTRA_RANGE(1, 0x7ff, 1),
+      .intextra = INTEXTRA_RANGE(30, 3600, 1),
       .id     = "ticket_expires",
       .name   = N_("Ticket expiration (seconds)"),
       .desc   = N_("The number of seconds in which authentication tickets generated by "