diff options
| author | Andrew Tridgell <tridge@samba.org> | 2010-09-28 20:43:58 -0700 |
|---|---|---|
| committer | Andrew Tridgell <tridge@samba.org> | 2010-09-29 03:55:04 +0000 |
| commit | 06022dad70ec11ddbedc09a4a1fffe127ced2a06 (patch) | |
| tree | dfeb7e1fbfec23319fa752fca850e330714507d8 /source4/scripting | |
| parent | 3b0d6fda38749b01d2f8c4ff0ccbfc6ffc7bde49 (diff) | |
| download | samba-06022dad70ec11ddbedc09a4a1fffe127ced2a06.tar.gz samba-06022dad70ec11ddbedc09a4a1fffe127ced2a06.tar.bz2 samba-06022dad70ec11ddbedc09a4a1fffe127ced2a06.zip | |
s4-kerberos: use TZ=GMT when we are invoking krb5 code in helpers
Our helper scripts can fail on Fedora with the PDT timezone (Western
USA). This is the same issue we found with Heimdal earlier today, the
24 second difference between GMT and UTC, but this time in MIT
Kerberos as linked into bind9.
By forcing TZ=GMT in these scripts we avoid the problem
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
Diffstat (limited to 'source4/scripting')
| -rwxr-xr-x | source4/scripting/bin/samba_dnsupdate | 6 | ||||
| -rwxr-xr-x | source4/scripting/bin/samba_spnupdate | 6 |
2 files changed, 12 insertions, 0 deletions
diff --git a/source4/scripting/bin/samba_dnsupdate b/source4/scripting/bin/samba_dnsupdate index 5ed46c326c..a8a7e591c6 100755 --- a/source4/scripting/bin/samba_dnsupdate +++ b/source4/scripting/bin/samba_dnsupdate @@ -27,6 +27,12 @@ import tempfile # and don't get swallowed by a timeout os.putenv('PYTHONUNBUFFERED', '1') +# forcing GMT avoids a problem in some timezones with kerberos. Both MIT +# heimdal can get mutual authentication errors due to the 24 second difference +# between UTC and GMT when using some zone files (eg. the PDT zone from +# the US) +os.putenv("TZ", "GMT") + # Find right directory when running from source tree sys.path.insert(0, "bin/python") diff --git a/source4/scripting/bin/samba_spnupdate b/source4/scripting/bin/samba_spnupdate index 7c9ed4fbdd..b6501fbc47 100755 --- a/source4/scripting/bin/samba_spnupdate +++ b/source4/scripting/bin/samba_spnupdate @@ -24,6 +24,12 @@ import os, sys # and don't get swallowed by a timeout os.putenv('PYTHONUNBUFFERED', '1') +# forcing GMT avoids a problem in some timezones with kerberos. Both MIT +# heimdal can get mutual authentication errors due to the 24 second difference +# between UTC and GMT when using some zone files (eg. the PDT zone from +# the US) +os.putenv("TZ", "GMT") + # Find right directory when running from source tree sys.path.insert(0, "bin/python") |