KRB5 fallback on ERR_SKEW

Andrew Bartlett abartlet at
Sat Mar 25 10:29:05 GMT 2006

On Sat, 2006-03-25 at 10:58 +0100, Stefan (metze) Metzmacher wrote:
> Hi *,
> I noticed that windows clients are willing to retry a AS-REQ and TGS-REQ
> after getting ERR_SKEW...
> They don't do this against a samba4 kdc, but with the following patch
> they do...
> can this be merged into the main heimdal?
> Note: the windows kdc has client_princ = NULL and e_text = NULL,
> but e_text = NULL is enough to make the clients happy to retry...

Well spotted!  Please apply.

Andrew Bartlett

Andrew Bartlett                      
Authentication Developer, Samba Team 
Student Network Administrator, Hawker College
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 191 bytes
Desc: This is a digitally signed message part
Url :

More information about the samba-technical mailing list