diff --git a/scapy/layers/kerberos.py b/scapy/layers/kerberos.py index 3cb4784d577..38364e65e10 100644 --- a/scapy/layers/kerberos.py +++ b/scapy/layers/kerberos.py @@ -6084,7 +6084,7 @@ def GSS_Accept_sec_context( ) return Context, err, gssErrorCode - # Cache authenticators to avoid replay + # Store the time for future detections self.ReplayCache[replay_key] = ctime + KRB_MaxClockSkew # We take that opportunity to cleanup any expired items diff --git a/test/scapy/layers/kerberos.uts b/test/scapy/layers/kerberos.uts index c51b801c12d..c0dd5cfbe58 100644 --- a/test/scapy/layers/kerberos.uts +++ b/test/scapy/layers/kerberos.uts @@ -1915,7 +1915,7 @@ assert passiveState == GSS_S_COMPLETE assert passiveContext.passive assert passiveContext.ssp_context.passive -= GSS_Accept_sec_context rejects a replayed AP-REQ without the replay flag += GSS_Accept_sec_context rejects a replayed AP-REQ from scapy.layers.gssapi import GSS_S_DUPLICATE_TOKEN