Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Set max_renewable_life to 1 week for the MIT KDC #28

Merged

Conversation

steffen-kiess
Copy link

Currently there is no max_renewable_life setting for the MIT KDC, which the MIT KDC interprets as 0 seconds. This will cause problems when testing ticket renewal.

This causes the tests with jborean93/pykrb5#40 to fail sometimes with the error message https://github.com/steffen-kiess/pykrb5/actions/runs/8299662077/job/22716417142:

  FAILED tests/test_creds.py::test_renew_creds - krb5._exceptions.Krb5Error: Ticket expired -1765328352

The reason that it fails only sometimes is that when the renewal attempt happens in the same second when the ticket was generated, the renewal succeeds.

Signed-off-by: Steffen Kieß <steffen.kiess@cis.iti.uni-stuttgart.de>
@jborean93 jborean93 merged commit b865a9f into pythongssapi:main Mar 18, 2024
2 checks passed
@jborean93
Copy link
Contributor

Thanks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants