So, the clockskew is in the context, which is an opaque struct (unless you include k5-int.h). All the times validation functions seem to be krb5int_*. ksu and others include k5-int.h so they can make their own check_exp function. What's a well-behaved app supposed to do to check for ticket expiration? Should I hard code 5*60 in there because I know I don't have a different value set?
Thanks, Chris ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
