diff options
| author | Nalin Dahyabhai <nalin@dahyabhai.net> | 2013-10-29 16:27:20 -0400 |
|---|---|---|
| committer | Greg Hudson <ghudson@mit.edu> | 2014-08-08 13:02:36 -0400 |
| commit | 297496f0938955ba4aaf0ebecf4e393e527b8cbf (patch) | |
| tree | 798b9c55ba643a1cf3ab216aa7d7d75476a5cfad /src/clients/ksu/ccache.c | |
| parent | 3a456898af626dcab4e1ab0749ca2ccb9ad6162b (diff) | |
| download | krb5-297496f0938955ba4aaf0ebecf4e393e527b8cbf.zip krb5-297496f0938955ba4aaf0ebecf4e393e527b8cbf.tar.gz krb5-297496f0938955ba4aaf0ebecf4e393e527b8cbf.tar.bz2 | |
Copy config entries to the ksu target ccache
When we try to screen out expired creds while reading them from one
ccache to eventually store in another, also keep configuration entries.
ticket: 7986 (new)
Diffstat (limited to 'src/clients/ksu/ccache.c')
| -rw-r--r-- | src/clients/ksu/ccache.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/clients/ksu/ccache.c b/src/clients/ksu/ccache.c index 4693bd4..0f9e042 100644 --- a/src/clients/ksu/ccache.c +++ b/src/clients/ksu/ccache.c @@ -219,7 +219,8 @@ krb5_error_code krb5_get_nonexp_tkts(context, cc, creds_array) while (!(retval = krb5_cc_next_cred(context, cc, &cur, &creds))){ - if ((retval = krb5_check_exp(context, creds.times))){ + if (!krb5_is_config_principal(context, creds.server) && + (retval = krb5_check_exp(context, creds.times))){ if (retval != KRB5KRB_AP_ERR_TKT_EXPIRED){ return retval; } |