You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@directory.apache.org by "Jiajia Li (JIRA)" <ji...@apache.org> on 2017/05/03 05:46:04 UTC
[jira] [Resolved] (DIRKRB-625) MIT Kerberos client failed to obtain
ticket-granting ticket from Kerby KDC
[ https://issues.apache.org/jira/browse/DIRKRB-625?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Jiajia Li resolved DIRKRB-625.
------------------------------
Resolution: Fixed
Because of the wrong renew_till time.
REF: verify_as_reply#get_in_tkt.c
{code}
|| ((request->kdc_options & KDC_OPT_RENEWABLE_OK) &&
!(request->kdc_options & KDC_OPT_RENEWABLE) &&
(as_reply->enc_part2->flags & KDC_OPT_RENEWABLE) &&
(request->till != 0) &&
(as_reply->enc_part2->times.renew_till > request->till))
{code}
commit 3e6f9d0ecc25e5d5a753f9c156c9c59209bb3664
Author: plusplusjiajia <ji...@intel.com>
Date: Wed May 3 13:49:02 2017 +0800
DIRKRB-625 MIT Kerberos client failed to obtain ticket-granting ticket from Kerby KDC.
> MIT Kerberos client failed to obtain ticket-granting ticket from Kerby KDC
> --------------------------------------------------------------------------
>
> Key: DIRKRB-625
> URL: https://issues.apache.org/jira/browse/DIRKRB-625
> Project: Directory Kerberos
> Issue Type: Bug
> Affects Versions: 1.0.0-GA
> Reporter: Jiajia Li
> Assignee: Jiajia Li
>
> With exception:
> kinit: KDC reply did not match expectations while getting initial credentials
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)