diff options
| author | Greg Hudson <ghudson@mit.edu> | 2013-06-02 01:22:38 -0400 |
|---|---|---|
| committer | Greg Hudson <ghudson@mit.edu> | 2013-06-05 16:26:06 -0400 |
| commit | 73cec24defdc9bf203a39f2e1059ec74e5a32dd9 (patch) | |
| tree | 038abd06025f34956e444fa75d9d6a5ef76a9023 /src/kdc/do_as_req.c | |
| parent | f2600131fb358339ceccecb1c80af7d471c0501b (diff) | |
| download | krb5-73cec24defdc9bf203a39f2e1059ec74e5a32dd9.tar.gz krb5-73cec24defdc9bf203a39f2e1059ec74e5a32dd9.tar.xz krb5-73cec24defdc9bf203a39f2e1059ec74e5a32dd9.zip | |
Use KDC clock skew for AS-REQ timestamps
Calculate request timestamps each time we encode a request, and use
the adjusted current time when calculating them, including adjustments
resulting from preauth-required errors early in the AS exchange.
As a side effect, this reverts one of the changes in commit
37b0e55e21926c7875b7176e24e13005920915a6 (#7063); we will once again
use the time adjustment from any ccache we read before the AS
exchange, if we don't have a more specific adjustment from a
preauth-required error.
Based on a patch from Stef Walter.
ticket: 7657 (new)
Diffstat (limited to 'src/kdc/do_as_req.c')
0 files changed, 0 insertions, 0 deletions