Only check the returned starttime to make sure it matches the

requested starttime if we requested a postdated ticket.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6885 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/lib/krb5/krb/ChangeLog b/src/lib/krb5/krb/ChangeLog
index d9285e501bf8ce68e1714f671bada6bf57ce90a8..a7f510089ad53f60e708b5f7c18a0c67ecff370a 100644 (file)
--- a/src/lib/krb5/krb/ChangeLog
+++ b/src/lib/krb5/krb/ChangeLog
@@ -1,3 +1,9 @@
+Fri Sep 29 00:08:53 1995  Theodore Y. Ts'o  <tytso@dcl>
+
+       * gc_via_tkt.c (krb5_get_cred_via_tkt): Only check the returned
+               starttime to make sure it matches the requested starttime
+               if we requested a postdated ticket.
+
 Thu Sep 28 22:58:53 1995  Theodore Y. Ts'o  <tytso@dcl>
 
        * conv_princ.c (krb5_425_conv_principal): Only convert instances

diff --git a/src/lib/krb5/krb/gc_via_tkt.c b/src/lib/krb5/krb/gc_via_tkt.c
index b2ca37fc5c07248f780d9ab840806078778162a1..c37d39acde63b7bfab9b3bd533a8f14967ac8eab 100644 (file)
--- a/src/lib/krb5/krb/gc_via_tkt.c
+++ b/src/lib/krb5/krb/gc_via_tkt.c
@@ -195,7 +195,8 @@ krb5_get_cred_via_tkt (context, tkt, kdcoptions, address, in_cred, out_cred)
     if (dec_rep->enc_part2->nonce != tgsrep.expected_nonce)
        retval = KRB5_KDCREP_MODIFIED;
 
-    if ((in_cred->times.starttime != 0) &&
+    if ((kdcoptions & KDC_OPT_POSTDATED) &&
+       (in_cred->times.starttime != 0) &&
        (in_cred->times.starttime != dec_rep->enc_part2->times.starttime))
        retval = KRB5_KDCREP_MODIFIED;