svn commit: lorikeet r645 - in trunk/heimdal/kdc: .

[abartlet at samba.org]

Author: abartlet
Date: 2006-11-01 21:17:48 +0000 (Wed, 01 Nov 2006)
New Revision: 645

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=lorikeet&rev=645

Log:
Log details of the time skew.

Andrew Bartlett

Modified:
   trunk/heimdal/kdc/kerberos5.c


Changeset:
Modified: trunk/heimdal/kdc/kerberos5.c
===================================================================
--- trunk/heimdal/kdc/kerberos5.c	2006-10-30 06:19:36 UTC (rev 644)
+++ trunk/heimdal/kdc/kerberos5.c	2006-11-01 21:17:48 UTC (rev 645)
@@ -1062,9 +1062,18 @@
 	    }
 	    free_PA_ENC_TS_ENC(&p);
 	    if (abs(kdc_time - p.patimestamp) > context->max_skew) {
+		char client_time[100];
+
+		krb5_format_time(context, p.patimestamp, 
+				 client_time, sizeof(client_time), TRUE); 
+
 		ret = KRB5KRB_AP_ERR_SKEW;
 		kdc_log(context, config, 0,
-			"Too large time skew -- %s", client_name);
+			"Too large time skew, client time %s is out by %u > %u seconds -- %s", 
+			client_time, 
+			(unsigned)abs(kdc_time - p.patimestamp), 
+			context->max_skew,
+			client_name);
 		/* 
 		 * the following is needed to make windows clients
 		 * to retry using the timestamp in the error message