c042f71c80
- replace older proposed changes for ksu with backports of the changes after review and merging upstream (#1015559, #1026099, #1118347)
31 lines
1.1 KiB
Diff
31 lines
1.1 KiB
Diff
From 297496f0938955ba4aaf0ebecf4e393e527b8cbf Mon Sep 17 00:00:00 2001
|
|
From: Nalin Dahyabhai <nalin@dahyabhai.net>
|
|
Date: Tue, 29 Oct 2013 16:27:20 -0400
|
|
Subject: [PATCH 5/7] Copy config entries to the ksu target ccache
|
|
|
|
When we try to screen out expired creds while reading them from one
|
|
ccache to eventually store in another, also keep configuration entries.
|
|
|
|
ticket: 7986 (new)
|
|
---
|
|
src/clients/ksu/ccache.c | 3 ++-
|
|
1 file changed, 2 insertions(+), 1 deletion(-)
|
|
|
|
diff --git a/src/clients/ksu/ccache.c b/src/clients/ksu/ccache.c
|
|
index 4693bd4..0f9e042 100644
|
|
--- a/src/clients/ksu/ccache.c
|
|
+++ b/src/clients/ksu/ccache.c
|
|
@@ -219,7 +219,8 @@ krb5_error_code krb5_get_nonexp_tkts(context, cc, creds_array)
|
|
|
|
while (!(retval = krb5_cc_next_cred(context, cc, &cur, &creds))){
|
|
|
|
- if ((retval = krb5_check_exp(context, creds.times))){
|
|
+ if (!krb5_is_config_principal(context, creds.server) &&
|
|
+ (retval = krb5_check_exp(context, creds.times))){
|
|
if (retval != KRB5KRB_AP_ERR_TKT_EXPIRED){
|
|
return retval;
|
|
}
|
|
--
|
|
2.0.4
|
|
|