From fba11018d1a3314934430eab58060c8bc750c10a Mon Sep 17 00:00:00 2001 From: Nalin Dahyabhai Date: Mon, 18 Jan 2010 20:03:17 +0000 Subject: [PATCH] - suppress warnings of impending password expiration if expiration is more than seven days away when the KDC reports it via the last-req field, just as we already do when it reports expiration via the key-expiration field (#556495) --- krb5-1.7-exp_warn.patch | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 krb5-1.7-exp_warn.patch diff --git a/krb5-1.7-exp_warn.patch b/krb5-1.7-exp_warn.patch new file mode 100644 index 0000000..1e0743d --- /dev/null +++ b/krb5-1.7-exp_warn.patch @@ -0,0 +1,17 @@ +Don't warn of expiration reported the new way if it's more than a week from +now, for consistency with the code that handles expiration times reported the +old way. + +diff -up krb5-1.7/src/lib/krb5/krb/gic_pwd.c krb5-1.7/src/lib/krb5/krb/gic_pwd.c +--- krb5-1.7/src/lib/krb5/krb/gic_pwd.c 2010-01-18 11:12:02.000000000 -0500 ++++ krb5-1.7/src/lib/krb5/krb/gic_pwd.c 2010-01-18 11:11:50.000000000 -0500 +@@ -389,7 +389,8 @@ cleanup: + delta / 86400, ts); + /* ignore an error here */ + /* PROMPTER_INVOCATION */ +- (*prompter)(context, data, 0, banner, 0, 0); ++ if (delta < 86400 * 7) ++ (*prompter)(context, data, 0, banner, 0, 0); + } + } + }