Ping again.
Basically, Java currently requires the renewable flag of a ticket to be
identical to the renewable flag in the request, and thus rejects the
following legal case:
- Client requests for a non-renewable ticket with a lifetime of 2 days
- KDC thinks 2 days is too long, instead, it issues a ticket with a
lifetime of 10 hours, but makes it renewable with 2 days
Thanks
Max
On 07/13/2015 05:12 PM, Weijun Wang wrote:
Hi All
Please take a look at the fix at
http://cr.openjdk.java.net/~weijun/8131051/webrev.00/
When a ticket request has a ticket_lifetime that the KDC considers too
long it will issue a renewable ticket with a shorter lifetime.
Unfortunately, JDK does not accept this.
Thanks
Max
