[1182] in Kerberos-V5-bugs
krb5b4pl3: lib/krb5/krb/get_in_tkt.c: return KRB5_KDCREP_SKEW, not KRB5_KDCREP_MODIFIED
daemon@ATHENA.MIT.EDU (Jonathan I. Kamens)
Tue Mar 14 21:38:46 1995
From: "Jonathan I. Kamens" <jik@cam.ov.com>
Date: Tue, 14 Mar 1995 21:41:54 -0500
To: krb5-bugs@MIT.EDU
When a response from the KDC isn't within the allowable clock skew,
the error code that should be returned is KRB5_KDCREP_SKEW, not
KRB5_KDCREP_MODIFIED. Here's a patch:
--- lib/krb5/krb/get_in_tkt.c 1995/02/27 01:46:25 1.1
+++ lib/krb5/krb/get_in_tkt.c 1995/02/27 01:46:45
@@ -268,7 +268,7 @@
}
if ((request.from == 0) &&
!in_clock_skew(as_reply->enc_part2->times.starttime)) {
- retval = KRB5_KDCREP_MODIFIED;
+ retval = KRB5_KDCREP_SKEW;
goto cleanup;
}
Jonathan Kamens | OpenVision Technologies, Inc. | jik@cam.ov.com