KRB5 fallback on ERR_SKEW

Sat Mar 25 10:36:55 GMT 2006

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Andrew Bartlett schrieb:
> On Sat, 2006-03-25 at 10:58 +0100, Stefan (metze) Metzmacher wrote:
>> Hi *,
>>
>> I noticed that windows clients are willing to retry a AS-REQ and TGS-REQ
>> after getting ERR_SKEW...
>>
>> They don't do this against a samba4 kdc, but with the following patch
>> they do...
>>
>> can this be merged into the main heimdal?
>>
>> Note: the windows kdc has client_princ = NULL and e_text = NULL,
>> but e_text = NULL is enough to make the clients happy to retry...
> 
> Well spotted!  Please apply.

done, can you please merge this to lorikeet as I don't have a lorikeet
tree...thanks!

metze
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFEJR1Gm70gjA5TCD8RAhgNAJ9n3PVCTtdc66xIFIMFTmcdfWYocgCgpcaT
L3D1sCSWtybYvUbqFcFiKXA=
=9X5D
-----END PGP SIGNATURE-----