diff options
| author | Greg Hudson <ghudson@mit.edu> | 2013-06-02 15:36:40 -0400 |
|---|---|---|
| committer | Greg Hudson <ghudson@mit.edu> | 2013-06-02 15:49:47 -0400 |
| commit | 3b1b31a57cd932eda928932e67f5f2857929f429 (patch) | |
| tree | 655a9ccc28ef4efd61a41c9a3928a077c0bb9e15 /src | |
| parent | 2a10e19e19c65af0e3890bdeae03c37089ef02ea (diff) | |
| download | krb5-3b1b31a57cd932eda928932e67f5f2857929f429.tar.gz krb5-3b1b31a57cd932eda928932e67f5f2857929f429.tar.xz krb5-3b1b31a57cd932eda928932e67f5f2857929f429.zip | |
Fix spurious clock skew caused by preauth delay
Commit 37b0e55e21926c7875b7176e24e13005920915a6 (#7063) prevented
clock skew caused by preauth delay by recording the time of the
initial request. However, it failed to take into account delay
between requests due to prompting during preauthentication. Fix this
by recording the request time for each request.
ticket: 7656 (new)
Diffstat (limited to 'src')
| -rw-r--r-- | src/lib/krb5/krb/get_in_tkt.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/src/lib/krb5/krb/get_in_tkt.c b/src/lib/krb5/krb/get_in_tkt.c index ff455d355..0dd497edb 100644 --- a/src/lib/krb5/krb/get_in_tkt.c +++ b/src/lib/krb5/krb/get_in_tkt.c @@ -1256,6 +1256,9 @@ init_creds_step_request(krb5_context context, } } + /* Remember when we sent this request (after any preauth delay). */ + ctx->request_time = time(NULL); + if (ctx->encoded_previous_request != NULL) { krb5_free_data(context, ctx->encoded_previous_request); ctx->encoded_previous_request = NULL; |