Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 30 Mar 2025 13:43:48 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 285775] kinit: krb5_get_init_creds: Clock skew too great after daylight saving time change in Europe
Message-ID:  <bug-285775-227@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D285775

            Bug ID: 285775
           Summary: kinit: krb5_get_init_creds: Clock skew too great after
                    daylight saving time change in Europe
           Product: Base System
           Version: 15.0-CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: bin
          Assignee: bugs@FreeBSD.org
          Reporter: saper@saper.info

The KDC server is running in the UTC time zone and runs ntpd

The client is FreeBSD 15.0-CURRENT laptop running CET/CEST time zones and h=
as
not been restarted after the daylight saving time change. This is also runn=
ing
ntpd, which has been restarted.

on the client I am using base system kinit:


> kinit --version=20=20=20=20=20=20=20
kinit (Heimdal 1.5.2)
Copyright 1995-2011 Kungliga Tekniska H=C3=B6gskolan
Send bug-reports to heimdal-bugs@h5l.org


> ls -l /etc/localtime=20
lrwxr-xr-x  1 root wheel 33  8 mar 07:18 /etc/localtime ->
/usr/share/zoneinfo/Europe/Berlin

Rough client time:
> env LANG=3DC date
Sun Mar 30 15:40:36 CEST 2025

Rough server time:
# env LANG=3DC date
Sun Mar 30 13:40:36 UTC 2025

kdc.log (running Heimdal):
2025-03-30T13:38:57 Too large time skew, client time 2025-03-30T14:59:51 is=
 out
by 4854 > 300 seconds -- saper@EXAMPLE.ORG

TZ is not set for kinit, setting it to TZ=3DCEST or TZ=3DCST does not help

This is not the first DST change I am seeing this, I remember vaguely that
rebooting the client helped.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-285775-227>