| Subject: | verify_as_reply on client incorrectly checks KDC_OPT_RENEWABLE_OK |
verify_as_reply() on the client side incorrectly checks
KDC_OPT_RENEWABLE_OK. It should only check the renewable lifetime of
tickets whose request options included KDC_OPT_RENEWABLE_OK if those
options did not also include KDC_OPT_RENEWABLE. Otherwise
verify_as_reply() will fail for all renewable tickets.
KDC_OPT_RENEWABLE_OK. It should only check the renewable lifetime of
tickets whose request options included KDC_OPT_RENEWABLE_OK if those
options did not also include KDC_OPT_RENEWABLE. Otherwise
verify_as_reply() will fail for all renewable tickets.