oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Try adapt to timeskrew when we are using pre-auth, and if there was a

Browse Source 
time skew, try again.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24908 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2009-03-22 17:21:29 +00:00
parent 07ab75b5f9
commit 6e8a595828
1 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
lib/krb5/init_creds_pw.c
View File

@@ -1593,6 +1593,18 @@ krb5_init_creds_step(krb5_context context,
N_("Preauth required but no preauth "
"options send by KDC", ""));
}
} else if (ret == KRB5KRB_AP_ERR_SKEW && context->kdc_sec_offset == 0) {
/*
* Try adapt to timeskrew when we are using pre-auth, and
* if there was a time skew, try again.
*/
time_t sec_now;
krb5_timeofday (context, &sec_now);
context->kdc_sec_offset = ctx->error.stime - sec_now;
if (context->kdc_sec_offset)
ret = 0;
} else if (ret == KRB5_KDC_ERR_WRONG_REALM && ctx->flags.canonicalize) {
/* client referal to a new realm */
if (ctx->error.crealm) {