Please review the fix at http://cr.openjdk.java.net/~weijun/8186576/webrev.00
This is a MIT/krb5 bug [1], but we will accept it anyway. Also, renew such a ticket is now a no-op because the lifetime will not be extended anyway. New test included. Thanks Max [1] http://mailman.mit.edu/pipermail/krbdev/2017-August/012809.html