]> git.ipfire.org Git - thirdparty/krb5.git/commit
Refresh manually acquired creds from client keytab 1044/head
authorRobbie Harwood <rharwood@redhat.com>
Wed, 26 Feb 2020 23:27:17 +0000 (18:27 -0500)
committerGreg Hudson <ghudson@mit.edu>
Tue, 3 Mar 2020 03:27:20 +0000 (22:27 -0500)
commit729896467e3c77904666019d6cbbda583ae49b95
treede87ceead1d1b1561dc78a67cf43cc43e5c16d62
parentcbdbc8d00d31344fafe00e0fdf984e04e631f7c4
Refresh manually acquired creds from client keytab

If a client keytab is present but credentials are acquired manually,
the credentials would not be refreshed because no refresh_time config
var is set in the cache.  Change kg_cred_time_to_refresh() to attempt
a refresh from the client keytab on any credentials which will expire
in the next 30 seconds.

[ghudson@mit.edu: adjused code and added test case]

ticket: 7976
src/lib/gssapi/krb5/acquire_cred.c
src/tests/gssapi/t_client_keytab.py