diff options
| author | Jeffrey Altman <jaltman@secure-endpoints.com> | 2007-01-18 12:39:06 +0000 |
|---|---|---|
| committer | Jeffrey Altman <jaltman@secure-endpoints.com> | 2007-01-18 12:39:06 +0000 |
| commit | a329ba8882b7abec1b144db28a2eb1ceef17b2b2 (patch) | |
| tree | 0ff4e00762577a46addbc32837df2ccabb0a975d /src/include | |
| parent | 2ba6bca3eddc20d3f59e92b7b264326201831280 (diff) | |
| download | krb5-a329ba8882b7abec1b144db28a2eb1ceef17b2b2.tar.gz krb5-a329ba8882b7abec1b144db28a2eb1ceef17b2b2.tar.xz krb5-a329ba8882b7abec1b144db28a2eb1ceef17b2b2.zip | |
NIM Correct Visual Identity Expiration Status
The visual status for the identities in NIM 1.1 was based
upon the highest alert status of any credential that was
associated with the identity. The correct behavior that is
now implemented is that the identity status should be based
solely upon the expiration state of the credentials obtained
by the identity provider.
For example, the Kerberos v5 identity provider will based the
identity expiration status on the initial TGT. Service tickets
with short lifetimes that expire do not prevent the acquisition
of additional service tickets. Therefore, the identity should
not be listed as expired.
ticket: new
tags: pullup
component: windows
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@19068 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/include')
0 files changed, 0 insertions, 0 deletions