diff options
| author | Greg Hudson <ghudson@mit.edu> | 2010-06-08 16:26:23 +0000 |
|---|---|---|
| committer | Greg Hudson <ghudson@mit.edu> | 2010-06-08 16:26:23 +0000 |
| commit | c38c2428d55cc3fa5440907e42d15e9a2e882084 (patch) | |
| tree | d542f77bf034ea6926d021c20a08beb2299e73b0 /src/kadmin | |
| parent | 8cabf8a9bbc359a1627d005e4a08dfa4ca61c89e (diff) | |
| download | krb5-c38c2428d55cc3fa5440907e42d15e9a2e882084.tar.gz krb5-c38c2428d55cc3fa5440907e42d15e9a2e882084.tar.xz krb5-c38c2428d55cc3fa5440907e42d15e9a2e882084.zip | |
Stop checking the current time against the context expiration time in
the message wrap/unwrap functions in the krb5 GSS mech. Heimdal
doesn't do it, and it generally results in poor app behavior when a
ticket expires. In exchange, it doesn't provide much security benefit
since it's not enforced across the board--for example, ssh sessions
can persist beyond ticket expiration time since they don't use GSS to
wrap payload data.
(This is a continuation of r24120, which should have contained the
changes to all four files.)
ticket: 6739
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24121 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/kadmin')
0 files changed, 0 insertions, 0 deletions