[krbdev.mit.edu #8272] clock skew ignored in latest kerberos?

Olga Kornievskaia via RT rt-comment at krbdev.mit.edu
Mon Oct 26 19:07:23 EDT 2015


Hi,

When client and KDC's clock are out of sync, the latest kinit (1.13.2)
doesn't fail with "clock skew" error. Is this intentional?

Steps to reproduce:
1. set client's clock either way ahead or way behind (hours)
2. do kinit and watch it succeed.

While I don't know exactly when the problem started, but in
krb-1.10.3, kinit worked correctly and produced an error.

Thank you.



More information about the krb5-bugs mailing list