Subject: expired second tickets

From: Michael Thomas <[email-masked]>
Date: Mon, 30 Jul 2001 13:39:39 -0700 (PDT)

In implementing a U-U client, I've run into a
question which I can't figure out whether is a bug
or a feature.  That is, in a u-u flow, if the
supplied second TGT is expired, should the KDC
reject the request? The MIT KDC doesn't, but it
seems sort of odd that the KDC wouldn't check
the second ticket's validity too.

Comments?

		Mike