Skip Menu |

Subject: git commit

Use KDC clock skew for AS-REQ timestamps

Calculate request timestamps each time we encode a request, and use
the adjusted current time when calculating them, including adjustments
resulting from preauth-required errors early in the AS exchange.

As a side effect, this reverts one of the changes in commit
37b0e55e21926c7875b7176e24e13005920915a6 (#7063); we will once again
use the time adjustment from any ccache we read before the AS
exchange, if we don't have a more specific adjustment from a
preauth-required error.

Based on a patch from Stef Walter.
Author: Greg Hudson <>
Commit: 73cec24defdc9bf203a39f2e1059ec74e5a32dd9
Branch: master
src/lib/krb5/krb/get_in_tkt.c | 17 ++++++++++++-----
1 files changed, 12 insertions(+), 5 deletions(-)