timezone changes

[Ezra Peisach]

>I wanted to change the timezone according to some input parameter and
>hence have changed the time with which the AS-REQ is sent.
....
>server is returning a KRB5KRB_AP_ERR_SKEW

Well - of course it is... 

The time that is sent over the network in ther kerberos requests is in
UTC (similar to GMT). Timezones are just a convenience to the end user -
but all computers are operating off the same timebase...

When you started mucking with the krb5_timeofday on a client - the
request that was sent to the server is totally out of wack with regards
to what it considers reality...  

There are two possibilities - either the kdc is complaining because you
are using the timestamp preauth - and your time is completly out of
wack, or the server is handling your request - and you think the server
has send you back bad data - with the time being off by more than 5 minutes.

Now you mentioned AS-REQ... What time are you using for your TGS?
Essentially - you are making a mess of things when you start playing
with timezones...