diff options
Diffstat (limited to 'src/lib')
| -rw-r--r-- | src/lib/gssapi/krb5/ChangeLog | 6 | ||||
| -rw-r--r-- | src/lib/gssapi/krb5/init_sec_context.c | 6 |
2 files changed, 11 insertions, 1 deletions
diff --git a/src/lib/gssapi/krb5/ChangeLog b/src/lib/gssapi/krb5/ChangeLog index 899ac007a..58bd008f0 100644 --- a/src/lib/gssapi/krb5/ChangeLog +++ b/src/lib/gssapi/krb5/ChangeLog @@ -1,3 +1,9 @@ +Thu Feb 12 16:38:14 1998 Tom Yu <tlyu@mit.edu> + + * init_sec_context.c: KLUDGE!! Add global variable + krb5_gss_dbg_client_expcreds to allow the client library to send + expired credentials for testing and debugging purposes. + Mon Feb 2 17:02:29 1998 Theodore Ts'o <tytso@rsts-11.mit.edu> * Makefile.in: Define BUILDTOP and thisconfigdir in the Makefile diff --git a/src/lib/gssapi/krb5/init_sec_context.c b/src/lib/gssapi/krb5/init_sec_context.c index ee2852dff..50855b58c 100644 --- a/src/lib/gssapi/krb5/init_sec_context.c +++ b/src/lib/gssapi/krb5/init_sec_context.c @@ -28,6 +28,10 @@ * $Id$ */ +/* XXX This is for debugging only!!! Should become a real bitfield + at some point */ +int krb5_gss_dbg_client_expcreds = 0; + static krb5_error_code make_ap_req(context, auth_context, cred, server, now, endtime, chan_bindings, req_flags, krb_flags, mech_type, token) @@ -158,7 +162,7 @@ make_ap_req(context, auth_context, cred, server, now, endtime, chan_bindings, * boundaries) because accept_sec_context code is also similarly * non-forgiving. */ - if (out_creds->times.endtime < now) { + if (!krb5_gss_dbg_client_expcreds && out_creds->times.endtime < now) { code = KRB5KRB_AP_ERR_TKT_EXPIRED; goto cleanup; } |