To: | krb5-bugs@mit.edu |
Subject: | renewable_ok behavior broken |
Date: | Fri, 6 Jun 2003 14:31:05 -0400 (EDT) |
From: | hartmans@MIT.EDU (Sam Hartman) |
If you have renewable and renewable_ok both set in kdc options and
request tickets with a longer lifetime than allowed by KDC policy but
provide a much longer rtime in the request, our KDC will ignore the
rtime and give you tickets renewable only as long as your lifetime
allowed.