- suppress warnings of impending password expiration if expiration is more

than seven days away when the KDC reports it via the last-req field,
    just as we already do when it reports expiration via the key-expiration
    field (#556495)

krb5-1.7-exp_warn.patch

@@ -0,0 +1,17 @@
+Don't warn of expiration reported the new way if it's more than a week from
+now, for consistency with the code that handles expiration times reported the
+old way.
+
+diff -up krb5-1.7/src/lib/krb5/krb/gic_pwd.c krb5-1.7/src/lib/krb5/krb/gic_pwd.c
+--- krb5-1.7/src/lib/krb5/krb/gic_pwd.c	2010-01-18 11:12:02.000000000 -0500
++++ krb5-1.7/src/lib/krb5/krb/gic_pwd.c	2010-01-18 11:11:50.000000000 -0500
+@@ -389,7 +389,8 @@ cleanup:
+ 			    delta / 86400, ts);
+ 	       /* ignore an error here */
+ 	       /* PROMPTER_INVOCATION */
+-	       (*prompter)(context, data, 0, banner, 0, 0);
++	       if (delta < 86400 * 7)
++	           (*prompter)(context, data, 0, banner, 0, 0);
+ 	    }
+       }
+    }