diff options
| author | Tom Yu <tlyu@mit.edu> | 1998-02-12 21:38:58 +0000 |
|---|---|---|
| committer | Tom Yu <tlyu@mit.edu> | 1998-02-12 21:38:58 +0000 |
| commit | 56d7e5b2f74483b43b294b9f96ff8d2b2fe8ec03 (patch) | |
| tree | 6b89cf6e0126cd3ce63e7f86b92b20d947dc9e8f /src | |
| parent | d1375a02a955f8ba4a2ed75f7fd1de613a88df28 (diff) | |
| download | krb5-56d7e5b2f74483b43b294b9f96ff8d2b2fe8ec03.zip krb5-56d7e5b2f74483b43b294b9f96ff8d2b2fe8ec03.tar.gz krb5-56d7e5b2f74483b43b294b9f96ff8d2b2fe8ec03.tar.bz2 | |
* init_sec_context.c: KLUDGE!! Add global variable
krb5_gss_dbg_client_expcreds to allow the client library to send
expired credentials for testing and debugging purposes.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10426 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src')
| -rw-r--r-- | src/lib/gssapi/krb5/ChangeLog | 6 | ||||
| -rw-r--r-- | src/lib/gssapi/krb5/init_sec_context.c | 6 |
2 files changed, 11 insertions, 1 deletions
diff --git a/src/lib/gssapi/krb5/ChangeLog b/src/lib/gssapi/krb5/ChangeLog index 899ac00..58bd008 100644 --- a/src/lib/gssapi/krb5/ChangeLog +++ b/src/lib/gssapi/krb5/ChangeLog @@ -1,3 +1,9 @@ +Thu Feb 12 16:38:14 1998 Tom Yu <tlyu@mit.edu> + + * init_sec_context.c: KLUDGE!! Add global variable + krb5_gss_dbg_client_expcreds to allow the client library to send + expired credentials for testing and debugging purposes. + Mon Feb 2 17:02:29 1998 Theodore Ts'o <tytso@rsts-11.mit.edu> * Makefile.in: Define BUILDTOP and thisconfigdir in the Makefile diff --git a/src/lib/gssapi/krb5/init_sec_context.c b/src/lib/gssapi/krb5/init_sec_context.c index ee2852d..50855b5 100644 --- a/src/lib/gssapi/krb5/init_sec_context.c +++ b/src/lib/gssapi/krb5/init_sec_context.c @@ -28,6 +28,10 @@ * $Id$ */ +/* XXX This is for debugging only!!! Should become a real bitfield + at some point */ +int krb5_gss_dbg_client_expcreds = 0; + static krb5_error_code make_ap_req(context, auth_context, cred, server, now, endtime, chan_bindings, req_flags, krb_flags, mech_type, token) @@ -158,7 +162,7 @@ make_ap_req(context, auth_context, cred, server, now, endtime, chan_bindings, * boundaries) because accept_sec_context code is also similarly * non-forgiving. */ - if (out_creds->times.endtime < now) { + if (!krb5_gss_dbg_client_expcreds && out_creds->times.endtime < now) { code = KRB5KRB_AP_ERR_TKT_EXPIRED; goto cleanup; } |