Kerberos DC

fix for automatic credential discarding
cheenamalhotra · Feb 8, 2018 · 923c220 · 923c220
1 parent ded790c
commit 923c220
Showing 1 changed file with 11 additions and 6 deletions.
diff --git a/src/main/java/com/microsoft/sqlserver/jdbc/SQLServerConnection.java b/src/main/java/com/microsoft/sqlserver/jdbc/SQLServerConnection.java
@@ -3428,19 +3428,24 @@ final boolean doExecute() throws SQLServerException {
             }
         }
         finally {
-            if (integratedSecurity) {
-                if (null != authentication)
-                    authentication.ReleaseClientContext();
-                authentication = null;
-
+            if (integratedSecurity) {                
                 if (null != ImpersonatedUserCred) {
                     try {
-                        ImpersonatedUserCred.dispose();
+                    	if (ImpersonatedUserCred.getRemainingLifetime() <= 0) {
+                            if (null != authentication)
+                                authentication.ReleaseClientContext();
+                            authentication = null;
+                    		ImpersonatedUserCred.dispose();
+                    	}
                     }
                     catch (GSSException e) {
                         if (connectionlogger.isLoggable(Level.FINER))
                             connectionlogger.finer(toString() + " Release of the credentials failed GSSException: " + e);
                     }
+                } else {
+                    if (null != authentication)
+                        authentication.ReleaseClientContext();
+                    authentication = null;
                 }
             }
         }