[1182] in Kerberos-V5-bugs

home help back first fref pref prev next nref lref last post

krb5b4pl3: lib/krb5/krb/get_in_tkt.c: return KRB5_KDCREP_SKEW, not KRB5_KDCREP_MODIFIED

daemon@ATHENA.MIT.EDU (Jonathan I. Kamens)
Tue Mar 14 21:38:46 1995

From: "Jonathan I. Kamens" <jik@cam.ov.com>
Date: Tue, 14 Mar 1995 21:41:54 -0500
To: krb5-bugs@MIT.EDU

When a response from the KDC isn't within the allowable clock skew,
the error code that should be returned is KRB5_KDCREP_SKEW, not
KRB5_KDCREP_MODIFIED.  Here's a patch:

--- lib/krb5/krb/get_in_tkt.c	1995/02/27 01:46:25	1.1
+++ lib/krb5/krb/get_in_tkt.c	1995/02/27 01:46:45
@@ -268,7 +268,7 @@
     }
     if ((request.from == 0) &&
 	!in_clock_skew(as_reply->enc_part2->times.starttime)) {
-	retval = KRB5_KDCREP_MODIFIED;
+	retval = KRB5_KDCREP_SKEW;
 	goto cleanup;
     }
     
Jonathan Kamens  |  OpenVision Technologies, Inc.  |   jik@cam.ov.com

home help back first fref pref prev next nref lref last post