[SSSD] [PATCH] KRB5: Go offline in case of clock skew
Jakub Hrozek
jhrozek at redhat.com
Fri Nov 29 14:05:41 UTC 2013
On Fri, Nov 29, 2013 at 10:33:46AM +0100, Sumit Bose wrote:
> On Thu, Nov 28, 2013 at 04:40:04PM +0100, Jakub Hrozek wrote:
> > Hi,
> >
> > while testing the offline subdomain logins, I found out that clock skew
> > (which is still an issue in trusted environments even after the recent
> > MIT Kerberos changes) results in System Error.
> >
> > The attached patch simply treats the skew as networking error, which
> > results in failover and if no good serve is found, then in offline
> > operation. It didn't seem necessary to me to add new error code, but if
> > other developers would like ie better error reporting, I can add it
> > easily.
>
> makes sense, ACK.
>
> bye,
> Sumit
Pushed to master.
More information about the sssd-devel
mailing list