Only backdate the ticket that is created. The KDC reply must contain the time from the client's request or the client will fail its clockskew check if the request is backdated too far. To generate a diff of this commit: cvs diff -r5.266 -r5.267 krb5/src/kdc/ChangeLog cvs diff -r5.88 -r5.89 krb5/src/kdc/kerberos_v4.c