TODO s3:gse: gensec_gssapi", "requested_life_time

diff --git a/source3/librpc/crypto/gse.c b/source3/librpc/crypto/gse.c
index fba942bd6407b902ee65ab226139da805987961d..f2f6b67c7ac30099bc6fc4eac3cec8949dac7f4a 100644 (file)
--- a/source3/librpc/crypto/gse.c
+++ b/source3/librpc/crypto/gse.c
@@ -294,9 +294,14 @@ static NTSTATUS gse_get_client_auth_token(TALLOC_CTX *mem_ctx,
        gss_buffer_desc out_data;
        DATA_BLOB blob = data_blob_null;
        NTSTATUS status;
+       OM_uint32 time_req = 0;
        OM_uint32 time_rec = 0;
        struct timeval tv;
 
+       time_req = gensec_setting_int(gensec_security->settings,
+                                     "gensec_gssapi", "requested_life_time",
+                                     time_req);
+
        in_data.value = token_in->data;
        in_data.length = token_in->length;
 
@@ -306,7 +311,7 @@ static NTSTATUS gse_get_client_auth_token(TALLOC_CTX *mem_ctx,
                                        gse_ctx->server_name,
                                        &gse_ctx->gss_mech,
                                        gse_ctx->gss_want_flags,
-                                       0, GSS_C_NO_CHANNEL_BINDINGS,
+                                       time_req, GSS_C_NO_CHANNEL_BINDINGS,
                                        &in_data, NULL, &out_data,
                                        &gse_ctx->gss_got_flags, &time_rec);
        switch (gss_maj) {