Negate established flag if session is expired.

[mod_auth_gssapi.git] / src / sessions.c

diff --git a/src/sessions.c b/src/sessions.c
index 70f39a2..1554d24 100644 (file)
--- a/src/sessions.c
+++ b/src/sessions.c
@@ -157,6 +157,7 @@ void mag_check_session(struct mag_req_cfg *cfg, struct mag_conn **conn)
     expiration = gsessdata->expiration;
     if (expiration < time(NULL)) {
         /* credentials fully expired, return nothing */
     expiration = gsessdata->expiration;
     if (expiration < time(NULL)) {
         /* credentials fully expired, return nothing */

+        mc->established = false;

         goto done;
     }
 
         goto done;
     }