(do_authenticate): check for time skew
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@9110 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
@@ -469,6 +469,11 @@ do_authenticate (struct rx_header *hdr,
|
|||||||
krb5_ret_int32 (reply_sp, &chal);
|
krb5_ret_int32 (reply_sp, &chal);
|
||||||
krb5_storage_free (reply_sp);
|
krb5_storage_free (reply_sp);
|
||||||
|
|
||||||
|
if (abs(chal - kdc_time) > context->max_skew) {
|
||||||
|
make_error_reply (hdr, KACLOCKSKEW, reply);
|
||||||
|
goto out;
|
||||||
|
}
|
||||||
|
|
||||||
/* life */
|
/* life */
|
||||||
max_life = end_time - kdc_time;
|
max_life = end_time - kdc_time;
|
||||||
if (client_entry->max_life)
|
if (client_entry->max_life)
|
||||||
|
Reference in New Issue
Block a user