Re: Heimdal 0.2 and Windows 2000 - preauthentication

[Daniel Kouril <kouril@informatics.muni.cz>]

On Sun, 13 Feb 2000, Petr Holub wrote:

> Hi all!
> 
[..]
> And question No. 2: I've built Heimdal 0.2m on Win2k using
> Cygnus 20.1 beta. I'm able to authenticate in (unix) realm which
> doesn't use preauthentication but I'm not able authenticate into a domain
> which uses (requires) preauthentication. KDC complains a clock skew
> is too great and kauth says:
> kauth.exe: krb5_get_init_creds: Preauthentication failed
> I suspect Win there might be some problem with telling the
> time. Similar thing occurs when using forwardable creditals
> in telnet:
> [ Kerberos V5 refuses forwarded credentials because Read forwarded creds failed:
> Clock skew too great ]
> Has anybody an idea how to correct it?

Time handling in cygwin seems to be broken. With a new cygwin snapshot it
works well. A new windows travelkit is available at
http://www.ics.muni.cz/scb/travelkit/

Dan