--- heimdal-1.6~git20120403+dfsg1.orig/kdc/kerberos5.c	2014-04-01 17:54:41.000000000 +0200
+++ heimdal-1.6~git20120403+dfsg1/kdc/kerberos5.c	2014-04-01 17:39:20.236000000 +0200
@@ -1740,6 +1740,10 @@ _kdc_as_rep(kdc_request_t r,
 			    pat[n].name, r->client_name);
 		    found_pa = 1;
 		    r->et.flags.pre_authent = 1;
+		} else {
+		    if (ret == KRB5KRB_AP_ERR_SKEW) {
+			goto out;
+		    };
 		}
 	    }
 	}