Your message dated Fri, 2 Sep 2022 08:24:46 +1000
with message-id <[email protected]>
and subject line heimdal-clients: clock skew problem again
has caused the Debian Bug report #285021,
regarding heimdal-clients: clock skew problem again
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
285021: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=285021
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: heimdal-clients
Version: 0.6.3-1
Severity: important
Tags: patch


Exactly the problem discussed in bug #155816 occurs again if the KDC and the
client are "exactly" synchronized (KDC & NTP server on the same host, ntpdate
output on the client: offset 0.000004, delay 0.02576).

A workaround is setting kdc_timesync = 0 in /etc/krb5.conf (debian default is
kdc_timesync = 1) but it would be better to apply the patch from the old bug
report again, as it was apparently not included in the new upstream version.
Maybe the patch should also be suggested for upstream inclusion.


--- get_in_tkt.c    2002/04/18 09:11:39 1.104
+++ get_in_tkt.c    2002/08/08 14:42:27
@@ -223,7 +223,8 @@
      /* set kdc-offset */

      krb5_timeofday (context, &sec_now);
-    if (context->kdc_sec_offset == 0
+    if (rep->enc_part.flags.initial
+ 
&& context->kdc_sec_offset == 0
    && krb5_config_get_bool (context, NULL,
     
         "libdefaults",
     
         "kdc_timesync",




-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.9
Locale: LANG=C, LC_CTYPE=de_DE@euro (charmap=ANSI_X3.4-1968) (ignored: LC_ALL 
set to C)

Versions of packages heimdal-clients depends on:
ii  krb5-config           1.6                Configuration files for Kerberos V
ii  libasn1-6-heimdal     0.6.3-1            Libraries for Heimdal Kerberos
ii  libc6                 2.3.2.ds1-18       GNU C Library: Shared libraries an
ii  libdb4.2              4.2.52-17          Berkeley v4.2 Database Libraries [
ii  libedit2              2.9.cvs.20040827-1 BSD editline and history libraries
ii  libgssapi1-heimdal    0.6.3-1            Libraries for Heimdal Kerberos
ii  libhdb7-heimdal       0.6.3-1            Libraries for Heimdal Kerberos
ii  libhesiod0            3.0.2-15.1         Libraries for hesiod, a service na
ii  libkadm5clnt4-heimdal 0.6.3-1            Libraries for Heimdal Kerberos
ii  libkadm5srv7-heimdal  0.6.3-1            Libraries for Heimdal Kerberos
ii  libkafs0-heimdal      0.6.3-1            Libraries for Heimdal Kerberos
ii  libkrb-1-kerberos4kth 1.2.2-11           Kerberos Libraries for Kerberos4 F
ii  libkrb5-17-heimdal    0.6.3-1            Libraries for Heimdal Kerberos
ii  libncurses5           5.4-4              Shared libraries for terminal hand
ii  libotp0-kerberos4kth  1.2.2-11           Otp Libraries for Kerberos4 From K
ii  libroken16-kerberos4k 1.2.2-11           Roken Libraries for Kerberos4 From
ii  libsl0-kerberos4kth   1.2.2-11           Sl Libraries for Kerberos4 From KT
ii  libssl0.9.7           0.9.7e-2           SSL shared libraries

-- no debconf information

-- 
Christoph Scheurer                                  GnuPG key Id: 0x6128C6B6

contact:   http://www.theo.chemie.tu-muenchen.de/homepages/scheurer/


--- End Message ---
--- Begin Message ---
This bug was marked unreproducible almost 20 years ago. And the
suggested patch was already included upstream. If this is still a
problem with non-antique versions please open a new bug.
-- 
Brian May <[email protected]>

--- End Message ---

Reply via email to