summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJelmer Vernooij <jelmer@samba.org>2005-09-13 00:01:24 +0000
committerGerald (Jerry) Carter <jerry@samba.org>2007-10-10 13:38:07 -0500
commit957d361cd183a7f5fa9eedb1b205b3f872765884 (patch)
tree8c1119566e308b31685416b060eeee6505e33a52
parent342d229b4082004d30fa7018c04bba66da48a91b (diff)
downloadsamba-957d361cd183a7f5fa9eedb1b205b3f872765884.tar.gz
samba-957d361cd183a7f5fa9eedb1b205b3f872765884.tar.bz2
samba-957d361cd183a7f5fa9eedb1b205b3f872765884.zip
r10191: Return the right error code in the case of a time skew. Windows will now
ignore Kerberos and fallback to NTLMSSP when joining. Thanks to Andrew Bartlett for the assistence. (This used to be commit 3b6bfbe8cf555f4144ed06044d3ecb8044f86bca)
-rw-r--r--source4/heimdal/kdc/kerberos5.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/source4/heimdal/kdc/kerberos5.c b/source4/heimdal/kdc/kerberos5.c
index 38444f4a13..2cbb5831d4 100644
--- a/source4/heimdal/kdc/kerberos5.c
+++ b/source4/heimdal/kdc/kerberos5.c
@@ -982,7 +982,7 @@ _kdc_as_rep(krb5_context context,
}
free_PA_ENC_TS_ENC(&p);
if (abs(kdc_time - p.patimestamp) > context->max_skew) {
- ret = KRB5KDC_ERR_PREAUTH_FAILED;
+ ret = KRB5KRB_AP_ERR_SKEW;
e_text = "Too large time skew";
kdc_log(context, config, 0,
"Too large time skew -- %s", client_name);