fba11018d1
than seven days away when the KDC reports it via the last-req field,
just as we already do when it reports expiration via the key-expiration
field (#556495)
18 lines
692 B
Diff
18 lines
692 B
Diff
Don't warn of expiration reported the new way if it's more than a week from
|
|
now, for consistency with the code that handles expiration times reported the
|
|
old way.
|
|
|
|
diff -up krb5-1.7/src/lib/krb5/krb/gic_pwd.c krb5-1.7/src/lib/krb5/krb/gic_pwd.c
|
|
--- krb5-1.7/src/lib/krb5/krb/gic_pwd.c 2010-01-18 11:12:02.000000000 -0500
|
|
+++ krb5-1.7/src/lib/krb5/krb/gic_pwd.c 2010-01-18 11:11:50.000000000 -0500
|
|
@@ -389,7 +389,8 @@ cleanup:
|
|
delta / 86400, ts);
|
|
/* ignore an error here */
|
|
/* PROMPTER_INVOCATION */
|
|
- (*prompter)(context, data, 0, banner, 0, 0);
|
|
+ if (delta < 86400 * 7)
|
|
+ (*prompter)(context, data, 0, banner, 0, 0);
|
|
}
|
|
}
|
|
}
|