[39631] in Kerberos
Re: KEYRING ccache can hide valid tickets when it contains expired
daemon@ATHENA.MIT.EDU (Ao Shen via Kerberos)
Mon Oct 12 03:36:16 2026
Date: Mon, 12 Oct 2026 15:34:48 +0800
To: Greg Hudson <ghudson@mit.edu>, kerberos@mit.edu
Message-ID: <asyM5kTE1KJd7Sqp@Tainted-Ubermainframe.koisato.name>
MIME-Version: 1.0
Content-Disposition: inline
In-Reply-To: <19ed2495-4c38-49a8-b041-bd0a93948195@mit.edu>
From: Ao Shen via Kerberos <kerberos@mit.edu>
Reply-To: Ao Shen <sa22@mails.tsinghua.edu.cn>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Mon, Oct 12, 2026 at 02:57:16AM +0800, Greg Hudson wrote:
> Thanks for investigating and reporting this bug. I confirmed that I can
> reproduce the error (using kvno on a server principal created with -maxlife
> 1m) and filed a PR to fix it:
>
> https://github.com/krb5/krb5/pull/1546
Thanks for your reply. I have tried the patch locally and can confirm that it
fixed the issue.
--
Ao Shen
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
