Author: abartlet Date: 2006-11-01 21:17:48 +0000 (Wed, 01 Nov 2006) New Revision: 645
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=lorikeet&rev=645 Log: Log details of the time skew. Andrew Bartlett Modified: trunk/heimdal/kdc/kerberos5.c Changeset: Modified: trunk/heimdal/kdc/kerberos5.c =================================================================== --- trunk/heimdal/kdc/kerberos5.c 2006-10-30 06:19:36 UTC (rev 644) +++ trunk/heimdal/kdc/kerberos5.c 2006-11-01 21:17:48 UTC (rev 645) @@ -1062,9 +1062,18 @@ } free_PA_ENC_TS_ENC(&p); if (abs(kdc_time - p.patimestamp) > context->max_skew) { + char client_time[100]; + + krb5_format_time(context, p.patimestamp, + client_time, sizeof(client_time), TRUE); + ret = KRB5KRB_AP_ERR_SKEW; kdc_log(context, config, 0, - "Too large time skew -- %s", client_name); + "Too large time skew, client time %s is out by %u > %u seconds -- %s", + client_time, + (unsigned)abs(kdc_time - p.patimestamp), + context->max_skew, + client_name); /* * the following is needed to make windows clients * to retry using the timestamp in the error message
