use `max_skew'
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2304 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
@@ -116,7 +116,7 @@ as_rep(krb5_context context,
|
|||||||
}
|
}
|
||||||
patime = p.patimestamp;
|
patime = p.patimestamp;
|
||||||
free_PA_ENC_TS_ENC(&p);
|
free_PA_ENC_TS_ENC(&p);
|
||||||
if (abs(kdc_time - p.patimestamp) > 300) {
|
if (abs(kdc_time - p.patimestamp) > context->max_skew) {
|
||||||
krb5_mk_error (client_princ,
|
krb5_mk_error (client_princ,
|
||||||
KRB5KDC_ERR_PREAUTH_FAILED,
|
KRB5KDC_ERR_PREAUTH_FAILED,
|
||||||
"Too large time skew",
|
"Too large time skew",
|
||||||
|
@@ -68,7 +68,7 @@ krb5_rd_priv(krb5_context context,
|
|||||||
gettimeofday (&tv, NULL);
|
gettimeofday (&tv, NULL);
|
||||||
if (part.timestamp == NULL ||
|
if (part.timestamp == NULL ||
|
||||||
part.usec == NULL ||
|
part.usec == NULL ||
|
||||||
*part.timestamp - tv.tv_sec > 600) {
|
abs(*part.timestamp - tv.tv_sec) > context->max_skew) {
|
||||||
r = KRB5KRB_AP_ERR_SKEW;
|
r = KRB5KRB_AP_ERR_SKEW;
|
||||||
goto failure_part;
|
goto failure_part;
|
||||||
}
|
}
|
||||||
|
@@ -58,7 +58,7 @@ krb5_rd_safe(krb5_context context,
|
|||||||
gettimeofday (&tv, NULL);
|
gettimeofday (&tv, NULL);
|
||||||
if (safe.safe_body.timestamp == NULL ||
|
if (safe.safe_body.timestamp == NULL ||
|
||||||
safe.safe_body.usec == NULL ||
|
safe.safe_body.usec == NULL ||
|
||||||
*(safe.safe_body.timestamp) - tv.tv_sec > 600) {
|
abs(*safe.safe_body.timestamp - tv.tv_sec) > context->max_skew) {
|
||||||
r = KRB5KRB_AP_ERR_SKEW;
|
r = KRB5KRB_AP_ERR_SKEW;
|
||||||
goto failure;
|
goto failure;
|
||||||
}
|
}
|
||||||
|
Reference in New Issue
Block a user