>I wanted to change the timezone according to some input parameter and >hence have changed the time with which the AS-REQ is sent. .... >server is returning a KRB5KRB_AP_ERR_SKEW
Well - of course it is... The time that is sent over the network in ther kerberos requests is in UTC (similar to GMT). Timezones are just a convenience to the end user - but all computers are operating off the same timebase... When you started mucking with the krb5_timeofday on a client - the request that was sent to the server is totally out of wack with regards to what it considers reality... There are two possibilities - either the kdc is complaining because you are using the timestamp preauth - and your time is completly out of wack, or the server is handling your request - and you think the server has send you back bad data - with the time being off by more than 5 minutes. Now you mentioned AS-REQ... What time are you using for your TGS? Essentially - you are making a mess of things when you start playing with timezones... ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
