svn commit: samba r14711 - in branches/SAMBA_4_0/source/heimdal/kdc: .

[metze at samba.org]

Author: metze
Date: 2006-03-25 10:34:51 +0000 (Sat, 25 Mar 2006)
New Revision: 14711

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=14711

Log:
let windows clients retry after getting ERR_SKEW

metze
Modified:
   branches/SAMBA_4_0/source/heimdal/kdc/kerberos5.c


Changeset:
Modified: branches/SAMBA_4_0/source/heimdal/kdc/kerberos5.c
===================================================================
--- branches/SAMBA_4_0/source/heimdal/kdc/kerberos5.c	2006-03-25 10:16:27 UTC (rev 14710)
+++ branches/SAMBA_4_0/source/heimdal/kdc/kerberos5.c	2006-03-25 10:34:51 UTC (rev 14711)
@@ -1045,9 +1045,16 @@
 	    free_PA_ENC_TS_ENC(&p);
 	    if (abs(kdc_time - p.patimestamp) > context->max_skew) {
 		ret = KRB5KRB_AP_ERR_SKEW;
-		e_text = "Too large time skew";
 		kdc_log(context, config, 0,
 			"Too large time skew -- %s", client_name);
+		/* 
+		 * the following is needed to make windows clients
+		 * to retry using the timestamp in the error message
+		 *
+		 * this is maybe a bug in windows to not trying when e_text
+		 * is present...
+		 */
+		e_text = NULL;
 		goto out;
 	    }
 	    et.flags.pre_authent = 1;