[19645] in Kerberos_V5_Development
AS-REQ with till being the epoch
daemon@ATHENA.MIT.EDU (Weijun Wang)
Tue Aug 29 09:38:19 2017
From: Weijun Wang <weijun.wang@oracle.com>
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
Date: Tue, 29 Aug 2017 21:38:14 +0800
Message-Id: <A0E8C688-2D94-4DC1-87C8-FB88F05DFA17@oracle.com>
To: "krbdev@mit.edu" <krbdev@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
It looks like if I set the till field in AS-REQ to the epoch, the issued ticket will have a very big endtime (Ex: now it's 2106-02-07 06:28:15 (UTC)).
Well, this is OK.
But if I call kvno with this TGT in ccache, I see a "Ticket expired while getting credentials" error. Maybe somewhere in the KDC that very big endtime is mistakenly treated as a very small number?
My KDC is compiled from the head of https://github.com/krb5/krb5.git/.
Thanks
Max
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
