[SSSD] [PATCH] KRB5: Go offline in case of clock skew

Jakub Hrozek jhrozek at redhat.com
Fri Nov 29 14:05:41 UTC 2013


On Fri, Nov 29, 2013 at 10:33:46AM +0100, Sumit Bose wrote:
> On Thu, Nov 28, 2013 at 04:40:04PM +0100, Jakub Hrozek wrote:
> > Hi,
> > 
> > while testing the offline subdomain logins, I found out that clock skew
> > (which is still an issue in trusted environments even after the recent
> > MIT Kerberos changes) results in System Error.
> > 
> > The attached patch simply treats the skew as networking error, which
> > results in failover and if no good serve is found, then in offline
> > operation. It didn't seem necessary to me to add new error code, but if
> > other developers would like ie better error reporting, I can add it
> > easily.
> 
> makes sense, ACK.
> 
> bye,
> Sumit

Pushed to master.



More information about the sssd-devel mailing list