summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorStefan Metzmacher <metze@samba.org>2006-03-25 10:34:51 +0000
committerGerald (Jerry) Carter <jerry@samba.org>2007-10-10 13:59:11 -0500
commitc7ee532e46a515bb2c3ed8783c1c98cb13bf2caa (patch)
tree1a008b795af13e3c2f45ceeda73338ced9a853b4
parent30976b1af1b1f3ccb832532949ea47bf8f972ace (diff)
downloadsamba-c7ee532e46a515bb2c3ed8783c1c98cb13bf2caa.tar.gz
samba-c7ee532e46a515bb2c3ed8783c1c98cb13bf2caa.tar.bz2
samba-c7ee532e46a515bb2c3ed8783c1c98cb13bf2caa.zip
r14711: let windows clients retry after getting ERR_SKEW
metze (This used to be commit 02703f4e8f430233ec4365ea5cee641a9201802f)
-rw-r--r--source4/heimdal/kdc/kerberos5.c9
1 files changed, 8 insertions, 1 deletions
diff --git a/source4/heimdal/kdc/kerberos5.c b/source4/heimdal/kdc/kerberos5.c
index 392bc0acbe..3f9dcd12f8 100644
--- a/source4/heimdal/kdc/kerberos5.c
+++ b/source4/heimdal/kdc/kerberos5.c
@@ -1045,9 +1045,16 @@ _kdc_as_rep(krb5_context context,
free_PA_ENC_TS_ENC(&p);
if (abs(kdc_time - p.patimestamp) > context->max_skew) {
ret = KRB5KRB_AP_ERR_SKEW;
- e_text = "Too large time skew";
kdc_log(context, config, 0,
"Too large time skew -- %s", client_name);
+ /*
+ * the following is needed to make windows clients
+ * to retry using the timestamp in the error message
+ *
+ * this is maybe a bug in windows to not trying when e_text
+ * is present...
+ */
+ e_text = NULL;
goto out;
}
et.flags.pre_authent = 1;