From 4372de7bb8d681ebd952468ee8c3935179be9718 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Love=20H=C3=B6rnquist=20=C3=85strand?= Date: Fri, 17 Jun 2005 07:47:16 +0000 Subject: [PATCH] (krb5_rd_rep): check if KRB5_AUTH_CONTEXT_DO_TIME set and use that as a que that timestamp should be checked, DCE-STYLE gssapi needs to be able to tweek this git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15491 ec53bebd-3082-4978-b11e-865c3cabbd6b --- lib/krb5/rd_rep.c | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/lib/krb5/rd_rep.c b/lib/krb5/rd_rep.c index 613c74408..2564ba0a3 100644 --- a/lib/krb5/rd_rep.c +++ b/lib/krb5/rd_rep.c @@ -90,11 +90,13 @@ krb5_rd_rep(krb5_context context, if (ret) return ret; - if ((*repl)->ctime != auth_context->authenticator->ctime || - (*repl)->cusec != auth_context->authenticator->cusec) { - ret = KRB5KRB_AP_ERR_MUT_FAIL; - krb5_clear_error_string (context); - goto out; + if (auth_context->flags & KRB5_AUTH_CONTEXT_DO_TIME) { + if ((*repl)->ctime != auth_context->authenticator->ctime || + (*repl)->cusec != auth_context->authenticator->cusec) { + ret = KRB5KRB_AP_ERR_MUT_FAIL; + krb5_clear_error_string (context); + goto out; + } } if ((*repl)->seq_number) krb5_auth_con_setremoteseqnumber(context, auth_context,