KRB5 fallback on ERR_SKEW

[Andrew Bartlett]

On Sat, 2006-03-25 at 10:58 +0100, Stefan (metze) Metzmacher wrote:
> Hi *,
> 
> I noticed that windows clients are willing to retry a AS-REQ and TGS-REQ
> after getting ERR_SKEW...
> 
> They don't do this against a samba4 kdc, but with the following patch
> they do...
> 
> can this be merged into the main heimdal?
> 
> Note: the windows kdc has client_princ = NULL and e_text = NULL,
> but e_text = NULL is enough to make the clients happy to retry...

Well spotted!  Please apply.

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 191 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20060325/6379b620/attachment.bin