oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

implement KDC time offset and use it if [libdefaults]kdc_timesync is

Browse Source 
set.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2924 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Assar Westerlund
1997-08-11 23:33:29 +00:00
parent b1ea862adb
commit c7d9ab7ff1
1 changed files with 18 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
lib/krb5/get_in_tkt.c
View File

@@ -126,6 +126,7 @@ extract_ticket(krb5_context context,
krb5_principal tmp_principal;
int tmp;
time_t tmp_time;
int32_t sec_now;
/* compare client */
@@ -184,6 +185,18 @@ extract_ticket(krb5_context context,
goto out;
}
/* set kdc-offset */
krb5_timeofday (context, &sec_now);
if (context->kdc_sec_offset == 0
&& krb5_config_get_string (context->cf,
"libdefaults",
"kdc_timesync",
NULL) != NULL) {
context->kdc_sec_offset = rep->part2.authtime - sec_now;
krb5_timeofday (context, &sec_now);
}
/* check all times */
if (rep->part2.starttime) {
@@ -192,7 +205,7 @@ extract_ticket(krb5_context context,
tmp_time = rep->part2.authtime;
if (creds->times.starttime == 0
&& abs(tmp_time - time(NULL)) > context->max_skew) {
&& abs(tmp_time - sec_now) > context->max_skew) {
err = KRB5KRB_AP_ERR_MODIFIED;
goto out;
}
@@ -262,9 +275,11 @@ make_pa_enc_timestamp(krb5_context context, PA_DATA *pa, krb5_keyblock *key)
size_t len;
EncryptedData encdata;
krb5_error_code ret;
int32_t sec, usec;
p.patimestamp = time(NULL);
p.pausec = NULL;
krb5_us_timeofday (context, &sec, &usec);
p.patimestamp = sec;
p.pausec = usec;
ret = encode_PA_ENC_TS_ENC(buf + sizeof(buf) - 1,
sizeof(buf),