--- krb5-1.3.4-orig/src/lib/krb5/krb/get_in_tkt.c	2003-06-06 18:02:01.000000000 -0400
+++ krb5-1.3.4/src/lib/krb5/krb/get_in_tkt.c	2008-03-21 08:28:36.000000000 -0400
@@ -271,7 +271,7 @@
 
     if (context->library_options & KRB5_LIBOPT_SYNC_KDCTIME) {
 	retval = krb5_set_real_time(context,
-				    as_reply->enc_part2->times.authtime, 0);
+				    as_reply->enc_part2->times.authtime, -1);
 	if (retval)
 	    return retval;
     } else {
--- krb5-1.3.4-orig/src/lib/krb5/os/toffset.c	2003-07-09 15:45:24.000000000 -0400
+++ krb5-1.3.4/src/lib/krb5/os/toffset.c	2008-03-21 08:31:14.000000000 -0400
@@ -46,6 +46,8 @@
     if (retval)
 	    return retval;
     os_ctx->time_offset = seconds - sec;
+    if (microseconds == -1)	/* Real time microseconds given as -1 means */
+      usec = microseconds;	/* we don't know them so do not generate an offset for them. */
     os_ctx->usec_offset = microseconds - usec;
     os_ctx->os_flags = ((os_ctx->os_flags & ~KRB5_OS_TOFFSET_TIME) |
 			KRB5_OS_TOFFSET_VALID);