Author: abartlet
Date: 2005-09-21 11:21:50 +0000 (Wed, 21 Sep 2005)
New Revision: 473

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=lorikeet&rev=473

Log:
Merge jelmer's change to Samba4: Return correct krb5 error code for
clock skew, to match AD behaviour.

Andrew Bartlett

Modified:
   trunk/heimdal/kdc/kerberos5.c


Changeset:
Modified: trunk/heimdal/kdc/kerberos5.c
===================================================================
--- trunk/heimdal/kdc/kerberos5.c       2005-09-13 21:09:36 UTC (rev 472)
+++ trunk/heimdal/kdc/kerberos5.c       2005-09-21 11:21:50 UTC (rev 473)
@@ -982,7 +982,7 @@
            }
            free_PA_ENC_TS_ENC(&p);
            if (abs(kdc_time - p.patimestamp) > context->max_skew) {
-               ret = KRB5KDC_ERR_PREAUTH_FAILED;
+               ret = KRB5KRB_AP_ERR_SKEW;
                e_text = "Too large time skew";
                kdc_log(context, config, 0,
                        "Too large time skew -- %s", client_name);

Reply via email to