[krbdev.mit.edu #7657] git commit

[Greg Hudson via RT]

Use KDC clock skew for AS-REQ timestamps

Calculate request timestamps each time we encode a request, and use
the adjusted current time when calculating them, including adjustments
resulting from preauth-required errors early in the AS exchange.

As a side effect, this reverts one of the changes in commit
37b0e55e21926c7875b7176e24e13005920915a6 (#7063); we will once again
use the time adjustment from any ccache we read before the AS
exchange, if we don't have a more specific adjustment from a
preauth-required error.

Based on a patch from Stef Walter.

https://github.com/krb5/krb5/commit/73cec24defdc9bf203a39f2e1059ec74e5a32dd9
Author: Greg Hudson <ghudson at mit.edu>
Commit: 73cec24defdc9bf203a39f2e1059ec74e5a32dd9
Branch: master
 src/lib/krb5/krb/get_in_tkt.c |   17 ++++++++++++-----
 1 files changed, 12 insertions(+), 5 deletions(-)