From 06022dad70ec11ddbedc09a4a1fffe127ced2a06 Mon Sep 17 00:00:00 2001 From: Andrew Tridgell Date: Tue, 28 Sep 2010 20:43:58 -0700 Subject: s4-kerberos: use TZ=GMT when we are invoking krb5 code in helpers Our helper scripts can fail on Fedora with the PDT timezone (Western USA). This is the same issue we found with Heimdal earlier today, the 24 second difference between GMT and UTC, but this time in MIT Kerberos as linked into bind9. By forcing TZ=GMT in these scripts we avoid the problem Pair-Programmed-With: Andrew Bartlett --- source4/scripting/bin/samba_dnsupdate | 6 ++++++ source4/scripting/bin/samba_spnupdate | 6 ++++++ 2 files changed, 12 insertions(+) (limited to 'source4/scripting') diff --git a/source4/scripting/bin/samba_dnsupdate b/source4/scripting/bin/samba_dnsupdate index 5ed46c326c..a8a7e591c6 100755 --- a/source4/scripting/bin/samba_dnsupdate +++ b/source4/scripting/bin/samba_dnsupdate @@ -27,6 +27,12 @@ import tempfile # and don't get swallowed by a timeout os.putenv('PYTHONUNBUFFERED', '1') +# forcing GMT avoids a problem in some timezones with kerberos. Both MIT +# heimdal can get mutual authentication errors due to the 24 second difference +# between UTC and GMT when using some zone files (eg. the PDT zone from +# the US) +os.putenv("TZ", "GMT") + # Find right directory when running from source tree sys.path.insert(0, "bin/python") diff --git a/source4/scripting/bin/samba_spnupdate b/source4/scripting/bin/samba_spnupdate index 7c9ed4fbdd..b6501fbc47 100755 --- a/source4/scripting/bin/samba_spnupdate +++ b/source4/scripting/bin/samba_spnupdate @@ -24,6 +24,12 @@ import os, sys # and don't get swallowed by a timeout os.putenv('PYTHONUNBUFFERED', '1') +# forcing GMT avoids a problem in some timezones with kerberos. Both MIT +# heimdal can get mutual authentication errors due to the 24 second difference +# between UTC and GMT when using some zone files (eg. the PDT zone from +# the US) +os.putenv("TZ", "GMT") + # Find right directory when running from source tree sys.path.insert(0, "bin/python") -- cgit