* "If it indicates a time in the future beyond the acceptable clock skew,
* but the POSTDATED option has not been specified or the MAY-POSTDATE flag
* is not set in the TGT, then the error KDC_ERR_CANNOT_POSTDATE is
* returned."
*/
if ( startTime != null && startTime.greaterThan( now )
&& !startTime.isInClockSkew( config.getAllowableClockSkew() )
&& ( !request.getOption( KdcOptions.POSTDATED ) || !tgt.getEncTicketPart().getFlags().isMayPosdate() ) )
{
throw new KerberosException( ErrorType.KDC_ERR_CANNOT_POSTDATE );
}