s4-credentials Don't use expired Kerberos or GSSAPI credentials
authorAndrew Bartlett <abartlet@samba.org>
Tue, 7 Jun 2011 22:53:16 +0000 (08:53 +1000)
committerAndrew Bartlett <abartlet@samba.org>
Wed, 8 Jun 2011 01:08:22 +0000 (03:08 +0200)
commit9cf686f56fa50932a67f80a455c36025ca3470db
treea7447641e8f04711d8b3cba1efe047ccebc5cca6
parent8dbab93f28d8ddbce8f44116f45a107a05a59a15
s4-credentials Don't use expired Kerberos or GSSAPI credentials

In a long-lived credentials cache situation, we may need to refetch
the ticket after (say) 10 hours.  This code should help that happen,
by checking the lifetime before returning any credentials cache or
GSSAPI credentials.

Andrew Bartlett
source4/auth/credentials/credentials_krb5.c