svn commit: lorikeet r519 - in trunk/heimdal/kdc: .

[abartlet at samba.org]

Author: abartlet
Date: 2006-03-25 10:41:09 +0000 (Sat, 25 Mar 2006)
New Revision: 519

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=lorikeet&rev=519

Log:
Merge from metze's commit to Samba4:

let windows clients retry after getting ERR_SKEW


Modified:
   trunk/heimdal/kdc/kerberos5.c


Changeset:
Modified: trunk/heimdal/kdc/kerberos5.c
===================================================================
--- trunk/heimdal/kdc/kerberos5.c	2006-03-21 09:26:13 UTC (rev 518)
+++ trunk/heimdal/kdc/kerberos5.c	2006-03-25 10:41:09 UTC (rev 519)
@@ -1045,9 +1045,16 @@
 	    free_PA_ENC_TS_ENC(&p);
 	    if (abs(kdc_time - p.patimestamp) > context->max_skew) {
 		ret = KRB5KRB_AP_ERR_SKEW;
-		e_text = "Too large time skew";
 		kdc_log(context, config, 0,
 			"Too large time skew -- %s", client_name);
+		/* 
+		 * the following is needed to make windows clients
+		 * to retry using the timestamp in the error message
+		 *
+		 * this is maybe a bug in windows to not trying when e_text
+		 * is present...
+		 */
+		e_text = NULL;
 		goto out;
 	    }
 	    et.flags.pre_authent = 1;