Adapt to time skew in KRB-ERROR.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24909 ec53bebd-3082-4978-b11e-865c3cabbd6b

diff --git a/lib/krb5/init_creds_pw.c b/lib/krb5/init_creds_pw.c
index 5dd7a640951e709220cfb766262a04dae73bf78c..ae680fe30985a940f0aa33b46487a6fca93ac6c0 100644 (file)
--- a/lib/krb5/init_creds_pw.c
+++ b/lib/krb5/init_creds_pw.c
@@ -1598,11 +1598,7 @@ krb5_init_creds_step(krb5_context context,
                 * Try adapt to timeskrew when we are using pre-auth, and
                 * if there was a time skew, try again.
                 */
-               time_t sec_now;
-
-               krb5_timeofday (context, &sec_now);
-               context->kdc_sec_offset = ctx->error.stime - sec_now;
-
+               krb5_set_real_time(context, ctx->error.stime, -1);
                if (context->kdc_sec_offset)
                    ret = 0; 
            } else if (ret == KRB5_KDC_ERR_WRONG_REALM && ctx->flags.canonicalize) {