When expired ticket exists in ccache and time has changed (DST), kinit complains of too much skew

[Lewis Rosenthal]

This may be an uplevel bug.

Expired ticket left over in ccache from before DST ended. Both server and client shifted time offsets properly, and clocks were in agreement.

Attempting a kinit against the server yielded:

kinit.exe: krb5_get_init_creds: Clock skew too great

Confirmed behavior multiple times.

Running kdestroy -A first, and then kinit successfully acquired a ticket.

I guess I could fake this again in a VM by creating a bogus TZ string with a different DST end date.