Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
X-Mailer: MIME-tools 5.427 (Entity 5.427)
From: tlyu@mit.edu
Subject: git commit
RT-Send-CC:
X-RT-Original-Encoding: iso-8859-1
Content-Length: 711


Allow clock skew in krb5 gss_accept_sec_context()

Remove an unnecessarily strict check for ticket expiration from
kg_accept_krb5() and kg_accept_dce().  Instead, add the maximum
allowable clock skew to the reported lifetime of acceptor contexts.

(cherry picked from commit b496ce4095133536e0ace36b74130e4b9ecb5e11)

https://github.com/krb5/krb5/commit/8c40b196ce00e653081f6c21f1dd2cbbcd2cc64e
Author: Greg Hudson <ghudson@mit.edu>
Committer: Tom Yu <tlyu@mit.edu>
Commit: 8c40b196ce00e653081f6c21f1dd2cbbcd2cc64e
Branch: krb5-1.14
 src/lib/gssapi/krb5/accept_sec_context.c |   18 ++++--------------
 src/lib/gssapi/krb5/inq_context.c        |    7 ++++++-
 2 files changed, 10 insertions(+), 15 deletions(-)