use `max_skew'

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2304 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Assar Westerlund
1997-07-14 14:39:52 +00:00
parent 6a7c526452
commit 0fe09b54ab
3 changed files with 3 additions and 3 deletions

View File

@@ -116,7 +116,7 @@ as_rep(krb5_context context,
} }
patime = p.patimestamp; patime = p.patimestamp;
free_PA_ENC_TS_ENC(&p); free_PA_ENC_TS_ENC(&p);
if (abs(kdc_time - p.patimestamp) > 300) { if (abs(kdc_time - p.patimestamp) > context->max_skew) {
krb5_mk_error (client_princ, krb5_mk_error (client_princ,
KRB5KDC_ERR_PREAUTH_FAILED, KRB5KDC_ERR_PREAUTH_FAILED,
"Too large time skew", "Too large time skew",

View File

@@ -68,7 +68,7 @@ krb5_rd_priv(krb5_context context,
gettimeofday (&tv, NULL); gettimeofday (&tv, NULL);
if (part.timestamp == NULL || if (part.timestamp == NULL ||
part.usec == NULL || part.usec == NULL ||
*part.timestamp - tv.tv_sec > 600) { abs(*part.timestamp - tv.tv_sec) > context->max_skew) {
r = KRB5KRB_AP_ERR_SKEW; r = KRB5KRB_AP_ERR_SKEW;
goto failure_part; goto failure_part;
} }

View File

@@ -58,7 +58,7 @@ krb5_rd_safe(krb5_context context,
gettimeofday (&tv, NULL); gettimeofday (&tv, NULL);
if (safe.safe_body.timestamp == NULL || if (safe.safe_body.timestamp == NULL ||
safe.safe_body.usec == NULL || safe.safe_body.usec == NULL ||
*(safe.safe_body.timestamp) - tv.tv_sec > 600) { abs(*safe.safe_body.timestamp - tv.tv_sec) > context->max_skew) {
r = KRB5KRB_AP_ERR_SKEW; r = KRB5KRB_AP_ERR_SKEW;
goto failure; goto failure;
} }