hdb: Make maximum ticket lifetime and renew time signed integers

This allows for negative lifetimes to be encoded, and fits in better
with our use elsewhere of time_t, which in POSIX is a signed integer
type.

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>

diff --git a/lib/hdb/hdb.asn1 b/lib/hdb/hdb.asn1
index 1a763de3d444b84c2092bb2436c2eeb0f60ff902..341927f2f0d41074b98c09e20b57fedb434bb1c8 100644 (file)
--- a/lib/hdb/hdb.asn1
+++ b/lib/hdb/hdb.asn1
@@ -232,8 +232,8 @@ HDB_entry ::= SEQUENCE {
        valid-start[5]  KerberosTime OPTIONAL,
        valid-end[6]    KerberosTime OPTIONAL,
        pw-end[7]       KerberosTime OPTIONAL,
-       max-life[8]     INTEGER (0..4294967295) OPTIONAL,
-       max-renew[9]    INTEGER (0..4294967295) OPTIONAL,
+       max-life[8]     INTEGER (-2147483648..2147483647) OPTIONAL,
+       max-renew[9]    INTEGER (-2147483648..2147483647) OPTIONAL,
        flags[10]       HDBFlags,
        etypes[11]      HDB-EncTypeList OPTIONAL,
        generation[12]  GENERATION OPTIONAL,