s4:auth/gensec_gssapi: add "gensec_gssapi:requested_life_time" option
authorStefan Metzmacher <metze@samba.org>
Fri, 20 Apr 2012 11:51:22 +0000 (13:51 +0200)
committerStefan Metzmacher <metze@samba.org>
Wed, 16 May 2012 06:10:11 +0000 (08:10 +0200)
metze

source4/auth/gensec/gensec_gssapi.c

index 787ef9c559a6a2f7c01ba1846a89a44a971f7018..071ce60da52861c0fa79626ba7147228af941935 100644 (file)
@@ -416,9 +416,14 @@ static NTSTATUS gensec_gssapi_update(struct gensec_security *gensec_security,
        OM_uint32 min_stat2;
        gss_buffer_desc input_token, output_token;
        gss_OID gss_oid_p = NULL;
+       OM_uint32 time_req = 0;
        OM_uint32 time_rec = 0;
        struct timeval tv;
 
+       time_req = gensec_setting_int(gensec_security->settings,
+                                     "gensec_gssapi", "requested_life_time",
+                                     time_req);
+
        input_token.length = in.length;
        input_token.value = in.data;
 
@@ -453,7 +458,7 @@ static NTSTATUS gensec_gssapi_update(struct gensec_security *gensec_security,
                                                        gensec_gssapi_state->server_name, 
                                                        gensec_gssapi_state->gss_oid,
                                                        gensec_gssapi_state->gss_want_flags, 
-                                                       0, 
+                                                       time_req,
                                                        gensec_gssapi_state->input_chan_bindings,
                                                        &input_token, 
                                                        &gss_oid_p,