From 2d11917cadf411368e37c2519d5bcce03c614bf8 Mon Sep 17 00:00:00 2001 From: Theodore Tso Date: Fri, 29 Sep 1995 04:09:56 +0000 Subject: [PATCH] Only check the returned starttime to make sure it matches the requested starttime if we requested a postdated ticket. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6885 dc483132-0cff-0310-8789-dd5450dbe970 --- src/lib/krb5/krb/ChangeLog | 6 ++++++ src/lib/krb5/krb/gc_via_tkt.c | 3 ++- 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/src/lib/krb5/krb/ChangeLog b/src/lib/krb5/krb/ChangeLog index d9285e501..a7f510089 100644 --- a/src/lib/krb5/krb/ChangeLog +++ b/src/lib/krb5/krb/ChangeLog @@ -1,3 +1,9 @@ +Fri Sep 29 00:08:53 1995 Theodore Y. Ts'o + + * gc_via_tkt.c (krb5_get_cred_via_tkt): Only check the returned + starttime to make sure it matches the requested starttime + if we requested a postdated ticket. + Thu Sep 28 22:58:53 1995 Theodore Y. Ts'o * conv_princ.c (krb5_425_conv_principal): Only convert instances diff --git a/src/lib/krb5/krb/gc_via_tkt.c b/src/lib/krb5/krb/gc_via_tkt.c index b2ca37fc5..c37d39acd 100644 --- a/src/lib/krb5/krb/gc_via_tkt.c +++ b/src/lib/krb5/krb/gc_via_tkt.c @@ -195,7 +195,8 @@ krb5_get_cred_via_tkt (context, tkt, kdcoptions, address, in_cred, out_cred) if (dec_rep->enc_part2->nonce != tgsrep.expected_nonce) retval = KRB5_KDCREP_MODIFIED; - if ((in_cred->times.starttime != 0) && + if ((kdcoptions & KDC_OPT_POSTDATED) && + (in_cred->times.starttime != 0) && (in_cred->times.starttime != dec_rep->enc_part2->times.starttime)) retval = KRB5_KDCREP_MODIFIED; -- 2.26.2