Time Corrections in the KDC

["Henry B. Hotz" <hotz@jpl.nasa.gov>]

Where are time offset corrections done in the KDC?

I have a case where there is a 4-second offset, and the Solaris 10  
client is throwing a KRB5_KDCREP_MODIFIED error.  I *think* it's  
because the renew_till time in the reply is bigger than the  
renew_till time in the request.

I have a snoop file that shows the error with a sanitized user  
password if anyone is willing to look at it.
------------------------------------------------------------------------
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu