From 0e6e95235499818800d6ca15124a5860f0d92a2b Mon Sep 17 00:00:00 2001 From: Nalin Dahyabhai Date: Tue, 29 Oct 2013 16:27:20 -0400 Subject: [PATCH 6/6] Copy config entries to the target ccache When we try to screen out expired creds while reading them from one ccache to eventually store in another, also keep configuration entries. --- src/clients/ksu/ccache.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/clients/ksu/ccache.c b/src/clients/ksu/ccache.c index 2a97893..83b5e46 100644 --- a/src/clients/ksu/ccache.c +++ b/src/clients/ksu/ccache.c @@ -269,7 +269,8 @@ krb5_error_code krb5_get_nonexp_tkts(context, cc, creds_array) while (!(retval = krb5_cc_next_cred(context, cc, &cur, &creds))){ - if ((retval = krb5_check_exp(context, creds.times))){ + if (!krb5_is_config_principal(context, creds.server) && + (retval = krb5_check_exp(context, creds.times))){ if (retval != KRB5KRB_AP_ERR_TKT_EXPIRED){ return retval; } -- 1.8.4.2