RFR 8131051: KDC might issue a renewable ticket even if not requested

Weijun Wang weijun.wang at oracle.com
Mon Jul 13 09:12:05 UTC 2015


Hi All

Please take a look at the fix at

   http://cr.openjdk.java.net/~weijun/8131051/webrev.00/

When a ticket request has a ticket_lifetime that the KDC considers too 
long it will issue a renewable ticket with a shorter lifetime. 
Unfortunately, JDK does not accept this.

Thanks
Max


More information about the security-dev mailing list