diff options
author | Theodore Tso <tytso@mit.edu> | 1995-09-29 04:09:56 +0000 |
---|---|---|
committer | Theodore Tso <tytso@mit.edu> | 1995-09-29 04:09:56 +0000 |
commit | 2d11917cadf411368e37c2519d5bcce03c614bf8 (patch) | |
tree | d873264d163abb4b946a020bc4a4df04a04b80b3 /src/lib/krb5/krb/gc_via_tkt.c | |
parent | 98789fc8c5500ede8d0c77a02583aa7ab2d863bc (diff) | |
download | krb5-2d11917cadf411368e37c2519d5bcce03c614bf8.tar.gz krb5-2d11917cadf411368e37c2519d5bcce03c614bf8.tar.xz krb5-2d11917cadf411368e37c2519d5bcce03c614bf8.zip |
Only check the returned starttime to make sure it matches the
requested starttime if we requested a postdated ticket.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6885 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/lib/krb5/krb/gc_via_tkt.c')
-rw-r--r-- | src/lib/krb5/krb/gc_via_tkt.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/lib/krb5/krb/gc_via_tkt.c b/src/lib/krb5/krb/gc_via_tkt.c index b2ca37fc5c..c37d39acde 100644 --- a/src/lib/krb5/krb/gc_via_tkt.c +++ b/src/lib/krb5/krb/gc_via_tkt.c @@ -195,7 +195,8 @@ krb5_get_cred_via_tkt (context, tkt, kdcoptions, address, in_cred, out_cred) if (dec_rep->enc_part2->nonce != tgsrep.expected_nonce) retval = KRB5_KDCREP_MODIFIED; - if ((in_cred->times.starttime != 0) && + if ((kdcoptions & KDC_OPT_POSTDATED) && + (in_cred->times.starttime != 0) && (in_cred->times.starttime != dec_rep->enc_part2->times.starttime)) retval = KRB5_KDCREP_MODIFIED; |