[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Time Corrections in the KDC
11 apr 2007 kl. 03.48 skrev Henry B. Hotz:
> Where are time offset corrections done in the KDC?
>
> I have a case where there is a 4-second offset, and the Solaris 10
> client is throwing a KRB5_KDCREP_MODIFIED error. I *think* it's
> because the renew_till time in the reply is bigger than the
> renew_till time in the request.
its in kdc/kerberos5.c and probably you want to check _kdc_as_rep()
(heimdal-0.8ish)
> I have a snoop file that shows the error with a sanitized user
> password if anyone is willing to look at it.
Sure.
Love