Allow clock skew in krb5 gss_accept_sec_context() Remove an unnecessarily strict check for ticket expiration from kg_accept_krb5() and kg_accept_dce(). Instead, add the maximum allowable clock skew to the reported lifetime of acceptor contexts. https://github.com/krb5/krb5/commit/b496ce4095133536e0ace36b74130e4b9ecb5e11 Author: Greg Hudson Commit: b496ce4095133536e0ace36b74130e4b9ecb5e11 Branch: master src/lib/gssapi/krb5/accept_sec_context.c | 18 ++++-------------- src/lib/gssapi/krb5/inq_context.c | 7 ++++++- 2 files changed, 10 insertions(+), 15 deletions(-)