Skip Menu |

Subject: git commit

Resolve krb5 GSS creds if time_rec is requested

The code normally tries to defer credential acquisition to a later
time. However, if the application requests the lifetime, the code
needs to resolve the credential and return the actual expiration time.
Returning 0 would cause the application to think credentials are

In the mechglue, pass through null time_rec pointers to the mech so
that the mech knows whether it was requested. In SPNEGO, pass through
time_rec to the mech when acquiring creds, via a new parameter to

[ minor style changes; edit and expand commit message]
Author: Simo Sorce <>
Committer: Greg Hudson <>
Commit: 50f426ac17a81ff5b7c212c24645b9874ea911f0
Branch: master
src/lib/gssapi/krb5/acquire_cred.c | 9 ++++++++-
src/lib/gssapi/mechglue/g_acquire_cred.c | 14 +++++++++-----
src/lib/gssapi/spnego/spnego_mech.c | 15 ++++++++-------
3 files changed, 25 insertions(+), 13 deletions(-)
Subject: git commit

Keep valgrind happy after time_rec change

In gss_acquire_cred_from(), initialize initTimeOut and acceptTimeOut
so valgrind does not complain. All these values are ignored if
time_rec is NULL, so not having those variables initialized is
harmless, but it is annoying to get noise in the valgrind output.

[ clarify commit message]
Author: Simo Sorce <>
Committer: Greg Hudson <>
Commit: 042e9fc95a662acb54dc9168749c6725f17ae34a
Branch: master
src/lib/gssapi/mechglue/g_acquire_cred.c | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)