diff options
| author | Stefan Metzmacher <metze@samba.org> | 2006-03-25 10:34:51 +0000 |
|---|---|---|
| committer | Gerald (Jerry) Carter <jerry@samba.org> | 2007-10-10 13:59:11 -0500 |
| commit | c7ee532e46a515bb2c3ed8783c1c98cb13bf2caa (patch) | |
| tree | 1a008b795af13e3c2f45ceeda73338ced9a853b4 | |
| parent | 30976b1af1b1f3ccb832532949ea47bf8f972ace (diff) | |
| download | samba-c7ee532e46a515bb2c3ed8783c1c98cb13bf2caa.tar.gz samba-c7ee532e46a515bb2c3ed8783c1c98cb13bf2caa.tar.xz samba-c7ee532e46a515bb2c3ed8783c1c98cb13bf2caa.zip | |
r14711: let windows clients retry after getting ERR_SKEW
metze
(This used to be commit 02703f4e8f430233ec4365ea5cee641a9201802f)
| -rw-r--r-- | source4/heimdal/kdc/kerberos5.c | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/source4/heimdal/kdc/kerberos5.c b/source4/heimdal/kdc/kerberos5.c index 392bc0acbe..3f9dcd12f8 100644 --- a/source4/heimdal/kdc/kerberos5.c +++ b/source4/heimdal/kdc/kerberos5.c @@ -1045,9 +1045,16 @@ _kdc_as_rep(krb5_context context, free_PA_ENC_TS_ENC(&p); if (abs(kdc_time - p.patimestamp) > context->max_skew) { ret = KRB5KRB_AP_ERR_SKEW; - e_text = "Too large time skew"; kdc_log(context, config, 0, "Too large time skew -- %s", client_name); + /* + * the following is needed to make windows clients + * to retry using the timestamp in the error message + * + * this is maybe a bug in windows to not trying when e_text + * is present... + */ + e_text = NULL; goto out; } et.flags.pre_authent = 1; |