Stop checking the current time against the context expiration time in
authorGreg Hudson <ghudson@mit.edu>
Tue, 8 Jun 2010 16:14:24 +0000 (16:14 +0000)
committerGreg Hudson <ghudson@mit.edu>
Tue, 8 Jun 2010 16:14:24 +0000 (16:14 +0000)
commit8cabf8a9bbc359a1627d005e4a08dfa4ca61c89e
tree42b4626afe641626fbb13254283ff969153f0ae3
parent8c89e25e3d7ad7ad883b707551410fa4ee11c67b
Stop checking the current time against the context expiration time in
the message wrap/unwrap functions in the krb5 GSS mech.  Heimdal
doesn't do it, and it generally results in poor app behavior when a
ticket expires.  In exchange, it doesn't provide much security benefit
since it's not enforced across the board--for example, ssh sessions
can persist beyond ticket expiration time since they don't use GSS to
wrap payload data.

ticket: 6739
target_version: 1.8.2
tags: pullup

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24120 dc483132-0cff-0310-8789-dd5450dbe970
src/lib/gssapi/krb5/k5unsealiov.c