RFR 8131051: KDC might issue a renewable ticket even if not requested

Weijun Wang weijun.wang at oracle.com
Mon Jul 13 09:12:05 UTC 2015

Hi All

Please take a look at the fix at


When a ticket request has a ticket_lifetime that the KDC considers too 
long it will issue a renewable ticket with a shorter lifetime. 
Unfortunately, JDK does not accept this.


More information about the security-dev mailing list