Questions on openldap and kerberos....

[Russ Allbery]

John Tobin <jtobin at po-box.esu.edu> writes:

> On the other hand the test put forward with the ldapsearch is running as
> a client on the server machine..... It's just one machine, so how does
> that work? How can I get different times when the client and server are
> on the same machine? I would be assuming that the local clock is used
> for both....did I miss something?

The clock of the Kerberos KDC also matters here.  I'm guessing that's the
one that you're skewed from.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>