]> git.apps.os.sepia.ceph.com Git - ceph.git/commit
auth: new rotating secret ttl should depend on now() + ttl
authorYehuda Sadeh <yehuda@hq.newdream.net>
Sat, 15 Jan 2011 00:29:41 +0000 (16:29 -0800)
committerYehuda Sadeh <yehuda@hq.newdream.net>
Sat, 15 Jan 2011 00:34:45 +0000 (16:34 -0800)
commit7d7af85c3a8b90ef93a152131a4b8fd66ceb6996
tree0d4e7372cf4bf7633c1e4f9a71b1c9fa718a74e2
parentae47f3c32ff6951c5e2bef28b63a984d64f84d86
auth: new rotating secret ttl should depend on now() + ttl

Before it only depended on the previous rotating secret (which was
always bigger than g_clock.now()). Since the tickets rotation is
never being done exactly when the old ticket expires (probably takes
a few seconds after that), then we ended up having tickets that expire
much sooner than we expected.
src/auth/cephx/CephxKeyServer.cc