use `max_skew'
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2304 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
@@ -116,7 +116,7 @@ as_rep(krb5_context context,
|
||||
}
|
||||
patime = p.patimestamp;
|
||||
free_PA_ENC_TS_ENC(&p);
|
||||
if (abs(kdc_time - p.patimestamp) > 300) {
|
||||
if (abs(kdc_time - p.patimestamp) > context->max_skew) {
|
||||
krb5_mk_error (client_princ,
|
||||
KRB5KDC_ERR_PREAUTH_FAILED,
|
||||
"Too large time skew",
|
||||
|
@@ -68,7 +68,7 @@ krb5_rd_priv(krb5_context context,
|
||||
gettimeofday (&tv, NULL);
|
||||
if (part.timestamp == NULL ||
|
||||
part.usec == NULL ||
|
||||
*part.timestamp - tv.tv_sec > 600) {
|
||||
abs(*part.timestamp - tv.tv_sec) > context->max_skew) {
|
||||
r = KRB5KRB_AP_ERR_SKEW;
|
||||
goto failure_part;
|
||||
}
|
||||
|
@@ -58,7 +58,7 @@ krb5_rd_safe(krb5_context context,
|
||||
gettimeofday (&tv, NULL);
|
||||
if (safe.safe_body.timestamp == NULL ||
|
||||
safe.safe_body.usec == NULL ||
|
||||
*(safe.safe_body.timestamp) - tv.tv_sec > 600) {
|
||||
abs(*safe.safe_body.timestamp - tv.tv_sec) > context->max_skew) {
|
||||
r = KRB5KRB_AP_ERR_SKEW;
|
||||
goto failure;
|
||||
}
|
||||
|
Reference in New Issue
Block a user