[23333] in Kerberos
Re: timezone changes
daemon@ATHENA.MIT.EDU (Ezra Peisach)
Fri Feb 4 14:49:36 2005
Date: Fri, 4 Feb 2005 06:51:03 -0500 (EST)
Message-Id: <200502041151.j14Bp31L024027@contents-vnder-pressvre.mit.edu>
From: Ezra Peisach <epeisach@mit.edu>
To: tameemahmed.khan@wipro.com
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
>I wanted to change the timezone according to some input parameter and
>hence have changed the time with which the AS-REQ is sent.
....
>server is returning a KRB5KRB_AP_ERR_SKEW
Well - of course it is...
The time that is sent over the network in ther kerberos requests is in
UTC (similar to GMT). Timezones are just a convenience to the end user -
but all computers are operating off the same timebase...
When you started mucking with the krb5_timeofday on a client - the
request that was sent to the server is totally out of wack with regards
to what it considers reality...
There are two possibilities - either the kdc is complaining because you
are using the timestamp preauth - and your time is completly out of
wack, or the server is handling your request - and you think the server
has send you back bad data - with the time being off by more than 5 minutes.
Now you mentioned AS-REQ... What time are you using for your TGS?
Essentially - you are making a mess of things when you start playing
with timezones...
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
