hdb: Make maximum ticket lifetime and renew time signed integers

This allows for negative lifetimes to be encoded, and fits in better
with our use elsewhere of time_t, which in POSIX is a signed integer
type.

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>

diff --git a/lib/hdb/hdb.asn1 b/lib/hdb/hdb.asn1
index 0e5fb29ddca76b51d6d0c3878e69164e5f68ddb4..35b5e29e936934b46ab90d219d70fcb47956bb8a 100644 (file)
--- a/lib/hdb/hdb.asn1
+++ b/lib/hdb/hdb.asn1
@@ -233,8 +233,8 @@ HDB_entry ::= SEQUENCE {
        valid-start[5]  KerberosTime OPTIONAL,
        valid-end[6]    KerberosTime OPTIONAL,
        pw-end[7]       KerberosTime OPTIONAL,
-       max-life[8]     INTEGER (0..4294967295) OPTIONAL,
-       max-renew[9]    INTEGER (0..4294967295) OPTIONAL,
+       max-life[8]     INTEGER (-2147483648..2147483647) OPTIONAL,
+       max-renew[9]    INTEGER (-2147483648..2147483647) OPTIONAL,
        flags[10]       HDBFlags,
        etypes[11]      HDB-EncTypeList OPTIONAL,
        generation[12]  GENERATION OPTIONAL,