svn commit: samba r10191 - in branches/SAMBA_4_0/source/heimdal/kdc: .

[jelmer at samba.org]

Author: jelmer
Date: 2005-09-13 00:01:24 +0000 (Tue, 13 Sep 2005)
New Revision: 10191

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=10191

Log:
Return the right error code in the case of a time skew. Windows will now 
ignore Kerberos and fallback to NTLMSSP when joining. Thanks to Andrew Bartlett
for the assistence.

Modified:
   branches/SAMBA_4_0/source/heimdal/kdc/kerberos5.c


Changeset:
Modified: branches/SAMBA_4_0/source/heimdal/kdc/kerberos5.c
===================================================================
--- branches/SAMBA_4_0/source/heimdal/kdc/kerberos5.c	2005-09-12 23:52:25 UTC (rev 10190)
+++ branches/SAMBA_4_0/source/heimdal/kdc/kerberos5.c	2005-09-13 00:01:24 UTC (rev 10191)
@@ -982,7 +982,7 @@
 	    }
 	    free_PA_ENC_TS_ENC(&p);
 	    if (abs(kdc_time - p.patimestamp) > context->max_skew) {
-		ret = KRB5KDC_ERR_PREAUTH_FAILED;
+		ret = KRB5KRB_AP_ERR_SKEW;
 		e_text = "Too large time skew";
 		kdc_log(context, config, 0,
 			"Too large time skew -- %s", client_name);