[SSSD] [PATCH] KRB5: Go offline in case of clock skew

Sumit Bose sbose at redhat.com
Fri Nov 29 09:33:46 UTC 2013


On Thu, Nov 28, 2013 at 04:40:04PM +0100, Jakub Hrozek wrote:
> Hi,
> 
> while testing the offline subdomain logins, I found out that clock skew
> (which is still an issue in trusted environments even after the recent
> MIT Kerberos changes) results in System Error.
> 
> The attached patch simply treats the skew as networking error, which
> results in failover and if no good serve is found, then in offline
> operation. It didn't seem necessary to me to add new error code, but if
> other developers would like ie better error reporting, I can add it
> easily.

makes sense, ACK.

bye,
Sumit



More information about the sssd-devel mailing list