Don't warn of expiration reported the new way if it's more than a week from now, for consistency with the code that handles expiration times reported the old way. diff -up krb5-1.7/src/lib/krb5/krb/gic_pwd.c krb5-1.7/src/lib/krb5/krb/gic_pwd.c --- krb5-1.7/src/lib/krb5/krb/gic_pwd.c 2010-01-18 11:12:02.000000000 -0500 +++ krb5-1.7/src/lib/krb5/krb/gic_pwd.c 2010-01-18 11:11:50.000000000 -0500 @@ -389,7 +389,8 @@ cleanup: delta / 86400, ts); /* ignore an error here */ /* PROMPTER_INVOCATION */ - (*prompter)(context, data, 0, banner, 0, 0); + if (delta < 86400 * 7) + (*prompter)(context, data, 0, banner, 0, 0); } } }