* init_sec_context.c: KLUDGE!! Add global variable

	krb5_gss_dbg_client_expcreds to allow the client library to send
	expired credentials for testing and debugging purposes.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10426 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/lib/gssapi/krb5/ChangeLog b/src/lib/gssapi/krb5/ChangeLog
index 899ac007a5182b82736f14f60b00defbea20b68d..58bd008f09a65599592dfc6489380f6d36ba140f 100644 (file)
--- a/src/lib/gssapi/krb5/ChangeLog
+++ b/src/lib/gssapi/krb5/ChangeLog
@@ -1,3 +1,9 @@
+Thu Feb 12 16:38:14 1998  Tom Yu  <tlyu@mit.edu>
+
+       * init_sec_context.c: KLUDGE!! Add global variable
+       krb5_gss_dbg_client_expcreds to allow the client library to send
+       expired credentials for testing and debugging purposes.
+
 Mon Feb  2 17:02:29 1998  Theodore Ts'o  <tytso@rsts-11.mit.edu>
 
        * Makefile.in: Define BUILDTOP and thisconfigdir in the Makefile

diff --git a/src/lib/gssapi/krb5/init_sec_context.c b/src/lib/gssapi/krb5/init_sec_context.c
index ee2852dffe80ecc585f4c47abebc61de9410e27a..50855b58cf9fae1521a5f2b41296190064143726 100644 (file)
--- a/src/lib/gssapi/krb5/init_sec_context.c
+++ b/src/lib/gssapi/krb5/init_sec_context.c
@@ -28,6 +28,10 @@
  * $Id$
  */
 
+/* XXX This is for debugging only!!!  Should become a real bitfield
+   at some point */
+int krb5_gss_dbg_client_expcreds = 0;
+
 static krb5_error_code
 make_ap_req(context, auth_context, cred, server, now, endtime, chan_bindings, 
            req_flags, krb_flags, mech_type, token)
@@ -158,7 +162,7 @@ make_ap_req(context, auth_context, cred, server, now, endtime, chan_bindings,
      * boundaries) because accept_sec_context code is also similarly
      * non-forgiving.
      */
-    if (out_creds->times.endtime < now) {
+    if (!krb5_gss_dbg_client_expcreds && out_creds->times.endtime < now) {
        code = KRB5KRB_AP_ERR_TKT_EXPIRED;
        goto cleanup;
     }