RT RT/krbdev.mit.edu: Ticket #7528 Fix spurious clock skew caused by gak_fct delay Signed in as guest.
[Logout]

[Home] [Search] [Configuration]

[Display] [History] [Basics] [Dates] [People] [Links] [Jumbo]

 
 

 The Basics  
Id
7528
Status
resolved
Worked
0 min
Priority
0/0
Queue
krb5
 

 Keyword Selections  
Component
Tags
Version_reported
Version_Fixed
  • 1.10.4
Target_Version
 

 Relationships  
Depends on:
Depended on by:
Parents:
Children:

Refers to:
  • 7063: (ghudson) Prompter delay can cause spurious clock skew [resolved]
Referred to by:
 
 Dates  
Created: Wed Jan 2 18:59:32 2013
Starts: Not set
Started: Wed Jan 2 18:59:33 2013
Last Contact: Not set
Due: Not set
Updated: Wed Jan 2 19:00:08 2013 by tlyu
 

 People  
Owner
 tlyu
Requestors
 tlyu@mit.edu
Cc
 
AdminCc
 
 

 More about Taylor Yu  
Comments about this user:
No comment entered about this user
This user's 25 highest priority tickets:
 

History   Display mode: [Brief headers] [Full headers]
      Wed Jan  2 18:59:32 2013  tlyu - Ticket created    
     
From: tlyu@mit.edu
Subject: SVN Commit


Fix spurious clock skew caused by gak_fct delay

In get_in_tkt.c, a time offset is computed between the KDC's auth_time
and the current system time after the reply is decrypted.  Time may
have elapsed between these events because of a gak_fct invocation
which blocks on user input.  The resulting spurious time offset can
cause subsequent TGS-REQs to fail and can also cause the end time of
the next AS request to be in the past (issue #889) in cases where the
old ccache is opened to find the default principal.

Use the system time, without offset, for the request time of an AS
request, for more predictable kinit behavior.  Use this request time,
rather than the current time, when computing the clock skew after the
reply is decrypted.

(cherry picked from commit 37b0e55e21926c7875b7176e24e13005920915a6)

https://github.com/krb5/krb5/commit/d6a6cd0e84154c782975955784678ebeebfee488
Author: Greg Hudson <ghudson@mit.edu>
Committer: Tom Yu <tlyu@mit.edu>
Commit: d6a6cd0e84154c782975955784678ebeebfee488
Branch: krb5-1.10
 src/lib/krb5/krb/get_in_tkt.c |    9 ++++-----
 1 files changed, 4 insertions(+), 5 deletions(-)


Download (untitled) 1k
      Wed Jan  2 18:59:33 2013  tlyu - Requestor tlyu@mit.edu added    
      Wed Jan  2 18:59:33 2013  tlyu - Status changed from new to resolved    
      Wed Jan  2 18:59:33 2013  tlyu - Version_Fixed 1.10.4 added    
      Wed Jan  2 19:00:08 2013  tlyu - Ticket 7528 RefersTo ticket 7063.