KDC wasn't handling postdated tickets requested via an initial ticket

request correctly.  It should have been setting the POSTDATED flag as
well as the INVALID flag.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@3455 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/kdc/do_as_req.c b/src/kdc/do_as_req.c
index 991518932abebcf65e552e6467e7a9b052a22f69..59da74dcc34a5ef3284b48a753d4a73255c293e6 100644 (file)
--- a/src/kdc/do_as_req.c
+++ b/src/kdc/do_as_req.c
@@ -291,6 +291,7 @@ krb5_data **response;                       /* filled in with a response packet */
     enc_tkt_reply.times.authtime = kdc_time;
 
     if (isflagset(request->kdc_options, KDC_OPT_POSTDATED)) {
+       setflag(enc_tkt_reply.flags, TKT_FLG_POSTDATED);
        setflag(enc_tkt_reply.flags, TKT_FLG_INVALID);
        enc_tkt_reply.times.starttime = request->from;
     } else