Jeffrey Altman

We can break the interface for 8.0. We can't do so for 7.x.

Anyway, that patch won't work because hx509 relies on ctime(), gmtime(), strptime() and tm2time(); all of which are constrained by glibc's definition of time_t. When glibc provides 64-bit time variants...

What Heimdal needs is https://sourceware.org/glibc/wiki/Y2038ProofnessDesign?rev=115

Linux kernel 5.6 has completed the implementation of 64-bit time in the kernel. However, Heimdal on 32-bit Linux distributions still require the support for 64-bit time in glibc.

The first two changes can be merged immediately. For the final one, I am sure we can address the issue without require sprinkling compiler version checks across the tree. The...

Replaced by https://github.com/heimdal/heimdal/pull/1010

This change is unnecessary. The program is about to terminate. There is no need to free this memory that will be released two lines later when the process exits.

@CheyenneWills Is Heimdal's use of the AC_HEADER_TIME macro a blocker for OpenAFS?

From https://www.gnu.org/software/autoconf/manual/autoconf-2.70/html_node/Obsolete-Macros.html > Macro: AC_HEADER_TIME > > This macro used to check whether it was possible to include time.h and sys/time.h in the same source file, defining TIME_WITH_SYS_TIME if so....

I am opposed to the creation of a krb5.conf setting to disable transit checks in cases where the KDC has refused to set the "transited_policy_checked" flag in the service ticket.