From 957d361cd183a7f5fa9eedb1b205b3f872765884 Mon Sep 17 00:00:00 2001 From: Jelmer Vernooij Date: Tue, 13 Sep 2005 00:01:24 +0000 Subject: r10191: Return the right error code in the case of a time skew. Windows will now ignore Kerberos and fallback to NTLMSSP when joining. Thanks to Andrew Bartlett for the assistence. (This used to be commit 3b6bfbe8cf555f4144ed06044d3ecb8044f86bca) --- source4/heimdal/kdc/kerberos5.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/source4/heimdal/kdc/kerberos5.c b/source4/heimdal/kdc/kerberos5.c index 38444f4a13..2cbb5831d4 100644 --- a/source4/heimdal/kdc/kerberos5.c +++ b/source4/heimdal/kdc/kerberos5.c @@ -982,7 +982,7 @@ _kdc_as_rep(krb5_context context, } free_PA_ENC_TS_ENC(&p); if (abs(kdc_time - p.patimestamp) > context->max_skew) { - ret = KRB5KDC_ERR_PREAUTH_FAILED; + ret = KRB5KRB_AP_ERR_SKEW; e_text = "Too large time skew"; kdc_log(context, config, 0, "Too large time skew -- %s", client_name); -- cgit