oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

kdc: Honor "unlimited" max_life/max_renew

Browse Source
This commit is contained in:
Nicolas Williams
2022-02-15 13:41:23 -06:00
parent 2c8a078bcf
commit e7e2c7a145
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
kdc/kerberos5.c
View File

@@ -2498,10 +2498,10 @@ _kdc_as_rep(astgs_request_t r)
*/
if (r->pa_max_life > 0)
t = start + min(t - start, r->pa_max_life);
else if (r->client->max_life)
else if (r->client->max_life && *r->client->max_life)
t = start + min(t - start, *r->client->max_life);
if (r->server->max_life)
if (r->server->max_life && *r->server->max_life)
t = start + min(t - start, *r->server->max_life);
/* Pre-auth can bound endtime as well */
@@ -2524,9 +2524,9 @@ _kdc_as_rep(astgs_request_t r)
t = *b->rtime;
if(t == 0)
t = MAX_TIME;
if(r->client->max_renew)
if(r->client->max_renew && *r->client->max_renew)
t = start + min(t - start, *r->client->max_renew);
if(r->server->max_renew)
if(r->server->max_renew && *r->server->max_renew)
t = start + min(t - start, *r->server->max_renew);
#if 0
t = min(t, start + realm->max_renew);