diff --git a/kdc/kerberos5.c b/kdc/kerberos5.c index f971deec6..87fc70247 100644 --- a/kdc/kerberos5.c +++ b/kdc/kerberos5.c @@ -990,7 +990,7 @@ check_tgs_flags(KDC_REQ_BODY *b, EncTicketPart *tgt, EncTicketPart *et) old_life -= *tgt->starttime; else old_life -= tgt->authtime; - et->endtime = min(*b->till, *et->starttime + old_life); + et->endtime = min(*et->renew_till, *et->starttime + old_life); } /* checks for excess flags */