[19646] in Kerberos_V5_Development
Re: AS-REQ with till being the epoch
daemon@ATHENA.MIT.EDU (Weijun Wang)
Tue Aug 29 10:00:27 2017
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
From: Weijun Wang <weijun.wang@oracle.com>
In-Reply-To: <A0E8C688-2D94-4DC1-87C8-FB88F05DFA17@oracle.com>
Date: Tue, 29 Aug 2017 22:00:05 +0800
Message-Id: <1ADF31AC-2295-4FC7-981C-3B4AE7768512@oracle.com>
To: "krbdev@mit.edu" <krbdev@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
More info:
The KRB-ERROR reply to TGS-REQ has a strange ctime: 1974-12-10 21:52:23 (UTC).
--Max
> On Aug 29, 2017, at 9:38 PM, Weijun Wang <weijun.wang@oracle.com> wrote:
>
> It looks like if I set the till field in AS-REQ to the epoch, the issued ticket will have a very big endtime (Ex: now it's 2106-02-07 06:28:15 (UTC)).
>
> Well, this is OK.
>
> But if I call kvno with this TGT in ccache, I see a "Ticket expired while getting credentials" error. Maybe somewhere in the KDC that very big endtime is mistakenly treated as a very small number?
>
> My KDC is compiled from the head of https://github.com/krb5/krb5.git/.
>
> Thanks
> Max
>
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
