[19630] in Kerberos_V5_Development
Re: RENEWABLE ticket with no renew_until
daemon@ATHENA.MIT.EDU (Greg Hudson)
Thu Aug 24 00:05:33 2017
To: Weijun Wang <weijun.wang@oracle.com>, "krbdev@mit.edu" <krbdev@mit.edu>
From: Greg Hudson <ghudson@mit.edu>
Message-ID: <d7d887d5-984e-ba98-2fbb-b59540116b3a@mit.edu>
Date: Thu, 24 Aug 2017 00:05:14 -0400
MIME-Version: 1.0
In-Reply-To: <34D8698F-94F1-4AA1-8DE3-F99BB162F741@oracle.com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
On 08/23/2017 03:46 AM, Weijun Wang wrote:
> This is not serious at all, but I wonder if the renew until time should not be removed at the 2nd last renew or the ticket should not be renewable, or it should not be rejected at the last renew.
This behavior appears to be a bug. The intent of the code is to issue a
non-renewable ticket in this case, although we should consider whether
to instead issue a trivially renewable ticket (in this case and in other
cases where a renewable ticket is requested but the computed renew_till
<= till). I filed a ticket here:
http://krbdev.mit.edu/rt/Ticket/Display.html?id=8609
Thanks for the report.
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
