Validate and renew should work on non-TGT creds
authorGreg Hudson <ghudson@mit.edu>
Tue, 13 Apr 2010 22:57:34 +0000 (22:57 +0000)
committerGreg Hudson <ghudson@mit.edu>
Tue, 13 Apr 2010 22:57:34 +0000 (22:57 +0000)
commitcc6dc869a5aa8cebc2ec4c081f11c0e116ae591a
tree7256db738fabbf131c392d45fff4cc86bfbdc717
parent4d9ac54e3ca75dd430e6f99dcc010d5afbee5a9d
Validate and renew should work on non-TGT creds

The validate and renew APIs were using get_cred_from_kdc, which
always presents a TGT to get credentials.  Instead, they should
present the ticket they are trying to validate or renew.  This is
most easily done with krb5_get_cred_via_tkt().  Move the relevant
code into a new file since it now has nothing in common with the
other APIs implemented in get_creds.c.

ticket: 6699

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23891 dc483132-0cff-0310-8789-dd5450dbe970
src/lib/krb5/krb/Makefile.in
src/lib/krb5/krb/get_creds.c
src/lib/krb5/krb/val_renew.c [new file with mode: 0644]