[Bug 285775] kinit: krb5_get_init_creds: Clock skew too great after daylight saving time change in Europe

From: <bugzilla-noreply_at_freebsd.org>
Date: Sun, 30 Mar 2025 13:43:48 UTC 
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=285775

            Bug ID: 285775
           Summary: kinit: krb5_get_init_creds: Clock skew too great after
                    daylight saving time change in Europe
           Product: Base System
           Version: 15.0-CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: bin
          Assignee: bugs@FreeBSD.org
          Reporter: saper@saper.info

The KDC server is running in the UTC time zone and runs ntpd

The client is FreeBSD 15.0-CURRENT laptop running CET/CEST time zones and has
not been restarted after the daylight saving time change. This is also running
ntpd, which has been restarted.

on the client I am using base system kinit:


> kinit --version       
kinit (Heimdal 1.5.2)
Copyright 1995-2011 Kungliga Tekniska Högskolan
Send bug-reports to heimdal-bugs@h5l.org


> ls -l /etc/localtime 
lrwxr-xr-x  1 root wheel 33  8 mar 07:18 /etc/localtime ->
/usr/share/zoneinfo/Europe/Berlin

Rough client time:
> env LANG=C date
Sun Mar 30 15:40:36 CEST 2025

Rough server time:
# env LANG=C date
Sun Mar 30 13:40:36 UTC 2025

kdc.log (running Heimdal):
2025-03-30T13:38:57 Too large time skew, client time 2025-03-30T14:59:51 is out
by 4854 > 300 seconds -- saper@EXAMPLE.ORG

TZ is not set for kinit, setting it to TZ=CEST or TZ=CST does not help

This is not the first DST change I am seeing this, I remember vaguely that
rebooting the client helped.

-- 
You are receiving this mail because:
You are the assignee for the bug.