diff options
| author | Greg Hudson <ghudson@mit.edu> | 2012-05-11 18:07:30 +0000 |
|---|---|---|
| committer | Greg Hudson <ghudson@mit.edu> | 2012-05-11 18:07:30 +0000 |
| commit | 39629e9df44ce8c4ad72fde951390acc6864407d (patch) | |
| tree | 68f29efeaa036fcb600a89353d018edfba8d76a3 /src/kadmin/testing | |
| parent | 70e46d97b6907da651069d1c0d74163b9edae5ea (diff) | |
| download | krb5-39629e9df44ce8c4ad72fde951390acc6864407d.tar.gz krb5-39629e9df44ce8c4ad72fde951390acc6864407d.tar.xz krb5-39629e9df44ce8c4ad72fde951390acc6864407d.zip | |
Omit start time in common AS requests
MIT and Heimdal KDCs ignore the start time for non-postdated ticket
requests, but AD yields an error if the start time is in the KDC's
future, defeating the kdc_timesync option. Omit the start time if the
caller did not specify a start time offset.
This change reenables the client check for too much clock skew in the
KDC reply in the non-timesync configuration. That check had been
unintentionally suppressed since the introduction of the
get_init_creds interfaces. Adjust the t_skew test script to expect
the new error behavior.
Code changes from stefw@gnome.org with slight modifications.
ticket: 7130
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25864 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/kadmin/testing')
0 files changed, 0 insertions, 0 deletions