Re: Time Corrections in the KDC

[Love Hörnquist Åstrand <lha@kth.se>]

11 apr 2007 kl. 03.48 skrev Henry B. Hotz:

> Where are time offset corrections done in the KDC?
>
> I have a case where there is a 4-second offset, and the Solaris 10  
> client is throwing a KRB5_KDCREP_MODIFIED error.  I *think* it's  
> because the renew_till time in the reply is bigger than the  
> renew_till time in the request.

its in kdc/kerberos5.c and probably you want to check _kdc_as_rep()  
(heimdal-0.8ish)

> I have a snoop file that shows the error with a sanitized user  
> password if anyone is willing to look at it.

Sure.

Love