Blame SOURCES/0005-Copy-config-entries-to-the-ksu-target-ccache.patch
|
 |
4be148 |
From 297496f0938955ba4aaf0ebecf4e393e527b8cbf Mon Sep 17 00:00:00 2001
|
|
|
5af5b2 |
From: Nalin Dahyabhai <nalin@dahyabhai.net>
|
|
|
5af5b2 |
Date: Tue, 29 Oct 2013 16:27:20 -0400
|
|
|
4be148 |
Subject: [PATCH 5/7] Copy config entries to the ksu target ccache
|
|
|
5af5b2 |
|
|
|
5af5b2 |
When we try to screen out expired creds while reading them from one
|
|
|
5af5b2 |
ccache to eventually store in another, also keep configuration entries.
|
|
|
4be148 |
|
|
|
4be148 |
ticket: 7986 (new)
|
|
|
5af5b2 |
---
|
|
|
5af5b2 |
src/clients/ksu/ccache.c | 3 ++-
|
|
|
5af5b2 |
1 file changed, 2 insertions(+), 1 deletion(-)
|
|
|
5af5b2 |
|
|
|
5af5b2 |
diff --git a/src/clients/ksu/ccache.c b/src/clients/ksu/ccache.c
|
|
|
4be148 |
index 4693bd4..0f9e042 100644
|
|
|
5af5b2 |
--- a/src/clients/ksu/ccache.c
|
|
|
5af5b2 |
+++ b/src/clients/ksu/ccache.c
|
|
|
4be148 |
@@ -219,7 +219,8 @@ krb5_error_code krb5_get_nonexp_tkts(context, cc, creds_array)
|
|
|
5af5b2 |
|
|
|
5af5b2 |
while (!(retval = krb5_cc_next_cred(context, cc, &cur, &creds))){
|
|
|
5af5b2 |
|
|
|
5af5b2 |
- if ((retval = krb5_check_exp(context, creds.times))){
|
|
|
5af5b2 |
+ if (!krb5_is_config_principal(context, creds.server) &&
|
|
|
5af5b2 |
+ (retval = krb5_check_exp(context, creds.times))){
|
|
|
5af5b2 |
if (retval != KRB5KRB_AP_ERR_TKT_EXPIRED){
|
|
|
5af5b2 |
return retval;
|
|
|
5af5b2 |
}
|
|
|
5af5b2 |
--
|
|
|
4be148 |
2.0.4
|
|
|
5af5b2 |
|