clock skew and preauth

[Chris Hecker]

If I do that, I was going to add it as an option and contribute the
diff.  But, is it going to be a big change to restart the process
internally?  I haven't started looking yet.

Chris


On 2012/03/20 21:17, Nico Williams wrote:
> On Tue, Mar 20, 2012 at 9:23 PM, Greg Hudson <ghudson at mit.edu> wrote:
>> krb5_init_creds_get_error and krb5_set_real_time(), but given what I
>> know about your deployment, it's probably easier to modify get_in_tkt.c
>> to set the offsets when a preauth-required error is received.
> 
> Is there any reason that there couldn't be a built-in option to just do that?
>