summaryrefslogtreecommitdiff
path: root/source3/nsswitch
diff options
context:
space:
mode:
authorGünther Deschner <gd@samba.org>2006-05-09 19:02:26 +0000
committerGerald (Jerry) Carter <jerry@samba.org>2007-10-10 11:16:55 -0500
commitf7776975080c88bec9013ccac8185c582e818e54 (patch)
tree98ef6a0ddca8465ba1608bd8a713b7422505a171 /source3/nsswitch
parent767ac75e6b5a999c8a57560ad888eb88589493a2 (diff)
downloadsamba-f7776975080c88bec9013ccac8185c582e818e54.tar.gz
samba-f7776975080c88bec9013ccac8185c582e818e54.tar.bz2
samba-f7776975080c88bec9013ccac8185c582e818e54.zip
r15523: Honour the time_offset also when verifying kerberos tickets. This
prevents a nasty failure condition in winbindd's pam_auth where a tgt and a service ticket could have been succefully retrieved, but just not validated. Guenther (This used to be commit a75dd80c6210d01aff104a86b0a9d39d65f2c348)
Diffstat (limited to 'source3/nsswitch')
-rw-r--r--source3/nsswitch/winbindd_pam.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/source3/nsswitch/winbindd_pam.c b/source3/nsswitch/winbindd_pam.c
index ad2127452c..243d2a7838 100644
--- a/source3/nsswitch/winbindd_pam.c
+++ b/source3/nsswitch/winbindd_pam.c
@@ -540,6 +540,7 @@ static NTSTATUS winbindd_raw_kerberos_login(struct winbindd_domain *domain,
result = ads_verify_ticket(state->mem_ctx,
lp_realm(),
+ time_offset,
&tkt,
&client_princ_out,
&pac_data,