diff options
| -rw-r--r-- | src/lib/krb5/krb/get_in_tkt.c | 17 |
1 files changed, 12 insertions, 5 deletions
diff --git a/src/lib/krb5/krb/get_in_tkt.c b/src/lib/krb5/krb/get_in_tkt.c index b422d91..f8f3801 100644 --- a/src/lib/krb5/krb/get_in_tkt.c +++ b/src/lib/krb5/krb/get_in_tkt.c @@ -689,7 +689,13 @@ pick_nonce(krb5_context context, krb5_init_creds_context ctx) static krb5_error_code set_request_times(krb5_context context, krb5_init_creds_context ctx) { - krb5_timestamp from, now = time(NULL); + krb5_error_code code; + krb5_timestamp from, now; + krb5_int32 now_ms; + + code = k5_init_creds_current_time(context, ctx, TRUE, &now, &now_ms); + if (code != 0) + return code; /* Omit request start time unless the caller explicitly asked for one. */ from = krb5int_addint32(now, ctx->start_time); @@ -751,10 +757,6 @@ restart_init_creds_loop(krb5_context context, krb5_init_creds_context ctx, goto cleanup; } - code = set_request_times(context, ctx); - if (code != 0) - goto cleanup; - krb5_free_principal(context, ctx->request->server); ctx->request->server = NULL; @@ -1229,6 +1231,11 @@ init_creds_step_request(krb5_context context, if (code != 0) goto cleanup; + /* Reset the request timestamps, possibly adjusting to the KDC time. */ + code = set_request_times(context, ctx); + if (code != 0) + goto cleanup; + krb5_free_data(context, ctx->inner_request_body); ctx->inner_request_body = NULL; code = encode_krb5_kdc_req_body(ctx->request, &ctx->inner_request_body); |