[19326] in Kerberos
Re: ASN.1 failed call to system time library
daemon@ATHENA.MIT.EDU (Ken Hornstein)
Wed May 28 14:35:45 2003
Message-Id: <200305281831.h4SIVksG011034@ginger.cmf.nrl.navy.mil>
To: Ken Raeburn <raeburn@mit.edu>
In-reply-to: Your message of "Tue, 13 May 2003 16:55:56 EDT."
<tx1of26sh0j.fsf@mit.edu>
Date: Wed, 28 May 2003 14:31:47 -0400
From: Ken Hornstein <kenh@cmf.nrl.navy.mil>
cc: kerberos@mit.edu
cc: Russ Allbery <rra@stanford.edu>
Errors-To: kerberos-bounces@mit.edu
(Yes, this was a couple of weeks ago).
>Russ Allbery <rra@stanford.edu> writes:
>
>> We're seeing a regular trickle of these log messages from our KDCs. Is
>> this anything to worry about, or should we just ignore them?
>>
>> krb5kdc[3531]: ASN.1 failed call to system time library - while dispatching
>
>How odd. That indicates an error reported by our gmt_mktime routine,
>applied to the parsed ASN.1 time encoding sent by some client. If the
>client in question is using the MIT code, we'd certainly like to know
>about it. :-)
We get these occasionally as well. I tracked them down, once; in every
instance it was a Macintosh that had it's system time reset to the Macintosh
epoch, which is outside of the Unix time range, which producdes this error.
(Okay, I added patches to the KDC to log the IP address when the dispatch
system produces an error).
--Ken
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
