[SSSD] [PATCH] krb5_child: Return ERR_NETWORK_IO on KRB5_KDCREP_SKEW

Jakub Hrozek jhrozek at redhat.com
Wed Jan 14 10:50:39 UTC 2015


Previously, we only handled KRB5KRB_AP_ERR_SKEW which meant
that if krb5_child received KRB5_KDCREP_SKEW, SSSD returned System
Error.

See also: https://bugzilla.redhat.com/show_bug.cgi?id=889206#c4 and the
next two comments.
-------------- next part --------------
>From f15afd3cf4424179f3cda4bddd8f7b9125f66538 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek at redhat.com>
Date: Wed, 14 Jan 2015 11:03:14 +0100
Subject: [PATCH] krb5_child: Return ERR_NETWORK_IO on KRB5_KDCREP_SKEW

Previously, we were only handling KRB5KRB_AP_ERR_SKEW
---
 src/providers/krb5/krb5_child.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/providers/krb5/krb5_child.c b/src/providers/krb5/krb5_child.c
index e5ce50be4bb088df3c45e5f642e8b3f3608c4662..ae395e5d3e1a879f5f8ee9c5cadf1c836ecfbec3 100644
--- a/src/providers/krb5/krb5_child.c
+++ b/src/providers/krb5/krb5_child.c
@@ -1076,6 +1076,7 @@ static errno_t map_krb5_error(krb5_error_code kerr)
     case KRB5_LIBOS_CANTREADPWD:
         return ERR_NO_CREDS;
 
+    case KRB5_KDCREP_SKEW:
     case KRB5KRB_AP_ERR_SKEW:
     case KRB5_KDC_UNREACH:
     case KRB5_REALM_CANT_RESOLVE:
-- 
2.1.0



More information about the sssd-devel mailing list