diff options
Diffstat (limited to 'src/lib')
| -rw-r--r-- | src/lib/krb5/krb/ChangeLog | 6 | ||||
| -rw-r--r-- | src/lib/krb5/krb/gc_via_tkt.c | 3 |
2 files changed, 8 insertions, 1 deletions
diff --git a/src/lib/krb5/krb/ChangeLog b/src/lib/krb5/krb/ChangeLog index d9285e501..a7f510089 100644 --- a/src/lib/krb5/krb/ChangeLog +++ b/src/lib/krb5/krb/ChangeLog @@ -1,3 +1,9 @@ +Fri Sep 29 00:08:53 1995 Theodore Y. Ts'o <tytso@dcl> + + * gc_via_tkt.c (krb5_get_cred_via_tkt): Only check the returned + starttime to make sure it matches the requested starttime + if we requested a postdated ticket. + Thu Sep 28 22:58:53 1995 Theodore Y. Ts'o <tytso@dcl> * conv_princ.c (krb5_425_conv_principal): Only convert instances diff --git a/src/lib/krb5/krb/gc_via_tkt.c b/src/lib/krb5/krb/gc_via_tkt.c index b2ca37fc5..c37d39acd 100644 --- a/src/lib/krb5/krb/gc_via_tkt.c +++ b/src/lib/krb5/krb/gc_via_tkt.c @@ -195,7 +195,8 @@ krb5_get_cred_via_tkt (context, tkt, kdcoptions, address, in_cred, out_cred) if (dec_rep->enc_part2->nonce != tgsrep.expected_nonce) retval = KRB5_KDCREP_MODIFIED; - if ((in_cred->times.starttime != 0) && + if ((kdcoptions & KDC_OPT_POSTDATED) && + (in_cred->times.starttime != 0) && (in_cred->times.starttime != dec_rep->enc_part2->times.starttime)) retval = KRB5_KDCREP_MODIFIED; |