[Bug 267827] No TGT from KDC after SA-22:14.heimdal

From: <bugzilla-noreply_at_freebsd.org>
Date: Thu, 17 Nov 2022 09:39:09 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=267827

            Bug ID: 267827
           Summary: No TGT from KDC after SA-22:14.heimdal
           Product: Base System
           Version: 13.1-RELEASE
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: bin
          Assignee: bugs@FreeBSD.org
          Reporter: pmc@citylink.dinoex.sub.org

After updating 13.1-RELEASE-p3 to 13.1-RELEASE-p4, the KDC does not provide
TGTs when running kinit. The error is 
kinit: krb5_get_init_creds: Clock skew too great

The same error appears with kinit from security/krb5 (MIT), so the issue is
with the KDC in base.

On the KDC an error is logged:
kdc[6798]: Too large time skew, client time 1970-01-01T01:00:00 is out by
1668625860 > 300 seconds

-- 
You are receiving this mail because:
You are the assignee for the bug.