Win logon to a MIT Kerberos V KDC?

[Actually davidchr]

The Kerberos protocol uses GMT, so as long as your timezones are correct
(including daylight savings) within the 5-minute defaults, clock skew
should have no impact on preauthentication.

-----
This message is provided "AS IS" with no warranties, and confers no
rights.
Message may originate from an unmonitored alias ("davespam").  If so,
use "davidchr" if a direct reply is required. 
Any opinions or policies stated within are my own and do not necessarily
constitute those of my employer.
I reside in Washington, USA, where Title 19 declares that sending me
Unsolicited Commercial Email can result in a $500 fine.
Harvesting of this address for purposes of bulk email (spam and UCE) is
expressly prohibited unless by my explicit prior request.  I retaliate
viciously against spammers and spam sites.


> -----Original Message-----
> From: Andreas Hasenack [mailto:andreas at conectiva.com.br] 
> Sent: Monday, September 30, 2002 3:27 PM
> To: Tony Hoyle
> Cc: kerberos at mit.edu
> Subject: Re: Win logon to a MIT Kerberos V KDC?
> 
> 
> Em Mon, Sep 30, 2002 at 10:26:17PM +0100, Tony Hoyle escreveu:
> > With no preauthentication login succeeds.
> 
> It could have nothing to do with it, but at one time I had 
> such a problem with krb5 on linux and win2k as a kdc, and it 
> turned out to be a time offset problem (since preauth is 
> basically timestamp). But not a "regular" offset problem, 
> time was synced within 10s tops. Know what it was? Daylight 
> saving :) Somehow the two machines (kdc and client) didn't 
> agree about the timezone even though the "date/time" commands 
> showed no difference.
> 
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> http://mailman.mit.edu/mailman/listinfo/kerberos
>