From: Theodore Tso <tytso@mit.edu>
Date: Fri, 29 Sep 1995 04:09:56 +0000 (+0000)
Subject: Only check the returned starttime to make sure it matches the
X-Git-Tag: krb5-1.0-beta6~981
X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=2d11917cadf411368e37c2519d5bcce03c614bf8;p=krb5.git

Only check the returned starttime to make sure it matches the
requested starttime if we requested a postdated ticket.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6885 dc483132-0cff-0310-8789-dd5450dbe970
---

diff --git a/src/lib/krb5/krb/ChangeLog b/src/lib/krb5/krb/ChangeLog
index d9285e501..a7f510089 100644
--- a/src/lib/krb5/krb/ChangeLog
+++ b/src/lib/krb5/krb/ChangeLog
@@ -1,3 +1,9 @@
+Fri Sep 29 00:08:53 1995  Theodore Y. Ts'o  <tytso@dcl>
+
+	* gc_via_tkt.c (krb5_get_cred_via_tkt): Only check the returned
+		starttime to make sure it matches the requested starttime
+		if we requested a postdated ticket.
+
 Thu Sep 28 22:58:53 1995  Theodore Y. Ts'o  <tytso@dcl>
 
 	* conv_princ.c (krb5_425_conv_principal): Only convert instances
diff --git a/src/lib/krb5/krb/gc_via_tkt.c b/src/lib/krb5/krb/gc_via_tkt.c
index b2ca37fc5..c37d39acd 100644
--- a/src/lib/krb5/krb/gc_via_tkt.c
+++ b/src/lib/krb5/krb/gc_via_tkt.c
@@ -195,7 +195,8 @@ krb5_get_cred_via_tkt (context, tkt, kdcoptions, address, in_cred, out_cred)
     if (dec_rep->enc_part2->nonce != tgsrep.expected_nonce)
 	retval = KRB5_KDCREP_MODIFIED;
 
-    if ((in_cred->times.starttime != 0) &&
+    if ((kdcoptions & KDC_OPT_POSTDATED) &&
+	(in_cred->times.starttime != 0) &&
     	(in_cred->times.starttime != dec_rep->enc_part2->times.starttime))
 	retval = KRB5_KDCREP_MODIFIED;