From 6bc93a28d5638ea4e76be699f507a76fa3e357ff Mon Sep 17 00:00:00 2001

From: Jakub Hrozek <jhrozek@redhat.com>

Date: Wed, 14 Jan 2015 11:03:14 +0100

Subject: [PATCH 168/168] krb5_child: Return ERR_NETWORK_IO on KRB5_KDCREP_SKEW

Previously, we were only handling KRB5KRB_AP_ERR_SKEW

Reviewed-by: Sumit Bose <sbose@redhat.com>

(cherry picked from commit 9b2cd4e5e451c07cb2f04cdbaea2b94ccb5fb2ee)

---

 src/providers/krb5/krb5_child.c | 1 +

 1 file changed, 1 insertion(+)

diff --git a/src/providers/krb5/krb5_child.c b/src/providers/krb5/krb5_child.c

index 9645f1aefbbaaf7fda511bb9650722109403d9df..39cd62846e3c58d65a87f670768cf699ae191f14 100644

--- a/src/providers/krb5/krb5_child.c

+++ b/src/providers/krb5/krb5_child.c

@@ -1072,6 +1072,7 @@ static errno_t map_krb5_error(krb5_error_code kerr)

     case KRB5_LIBOS_CANTREADPWD:

         return ERR_NO_CREDS;

+    case KRB5_KDCREP_SKEW:

     case KRB5KRB_AP_ERR_SKEW:

     case KRB5_KDC_UNREACH:

     case KRB5_REALM_CANT_RESOLVE:

-- 

2.1.0