X-Git-Url: https://git.decadent.org.uk/gitweb/?p=nfs-utils.git;a=blobdiff_plain;f=utils%2Fgssd%2Fkrb5_util.c;h=8178ae7ec04e0853b1f7dac32ed2adb91e72bb1e;hp=4befa72a5b1f6fb9c496a705602e57a0e30e1f00;hb=da54dec3cb40095cac96fd2d838144129262ac7f;hpb=5b9108f73a5f15372f9be9238070cf8d62956a49

diff --git a/utils/gssd/krb5_util.c b/utils/gssd/krb5_util.c
index 4befa72..8178ae7 100644
--- a/utils/gssd/krb5_util.c
+++ b/utils/gssd/krb5_util.c
@@ -350,6 +350,11 @@ gssd_get_single_krb5_cred(krb5_context context,
 
 	memset(&my_creds, 0, sizeof(my_creds));
 
+	/*
+	 * Workaround for clock skew among NFS server, NFS client and KDC
+	 * 300 because clock skew must be within 300sec for kerberos
+	 */
+	now += 300;
 	if (ple->ccname && ple->endtime > now && !nocache) {
 		printerr(2, "INFO: Credentials in CC '%s' are good until %d\n",
 			 ple->ccname, ple->endtime);