Don't warn of expiration reported the new way if it's more than a week from now, for consistency with the code that handles expiration times reported the old way. RT#6682 diff -up krb5-1.8/src/lib/krb5/krb/gic_pwd.c.exp_warn krb5-1.8/src/lib/krb5/krb/gic_pwd.c --- krb5-1.8/src/lib/krb5/krb/gic_pwd.c.exp_warn 2010-03-05 11:04:10.000000000 -0500 +++ krb5-1.8/src/lib/krb5/krb/gic_pwd.c 2010-03-05 11:04:10.000000000 -0500 @@ -407,7 +407,8 @@ cleanup: delta / 86400, ts); /* ignore an error here */ /* PROMPTER_INVOCATION */ - (*prompter)(context, data, 0, banner, 0, 0); + if (delta < 86400 * 7) + (*prompter)(context, data, 0, banner, 0, 0); } } }