[ 
https://issues.apache.org/jira/browse/DIRKRB-625?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Jiajia Li resolved DIRKRB-625.
------------------------------
    Resolution: Fixed

Because of the wrong renew_till time.
REF: verify_as_reply#get_in_tkt.c
{code}
|| ((request->kdc_options & KDC_OPT_RENEWABLE_OK) &&
            !(request->kdc_options & KDC_OPT_RENEWABLE) &&
            (as_reply->enc_part2->flags & KDC_OPT_RENEWABLE) &&
            (request->till != 0) &&
            (as_reply->enc_part2->times.renew_till > request->till))
{code}

commit 3e6f9d0ecc25e5d5a753f9c156c9c59209bb3664
Author: plusplusjiajia <jiajia...@intel.com>
Date:   Wed May 3 13:49:02 2017 +0800

    DIRKRB-625 MIT Kerberos client failed to obtain ticket-granting ticket from 
Kerby KDC.

> MIT Kerberos client failed to obtain ticket-granting ticket from Kerby KDC
> --------------------------------------------------------------------------
>
>                 Key: DIRKRB-625
>                 URL: https://issues.apache.org/jira/browse/DIRKRB-625
>             Project: Directory Kerberos
>          Issue Type: Bug
>    Affects Versions: 1.0.0-GA
>            Reporter: Jiajia Li
>            Assignee: Jiajia Li
>
> With exception:
> kinit: KDC reply did not match expectations while getting initial credentials



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Reply via email to