Win logon to a MIT Kerberos V KDC?
davespam at microsoft.com
Mon Sep 30 21:22:44 EDT 2002
The Kerberos protocol uses GMT, so as long as your timezones are correct
(including daylight savings) within the 5-minute defaults, clock skew
should have no impact on preauthentication.
This message is provided "AS IS" with no warranties, and confers no
Message may originate from an unmonitored alias ("davespam"). If so,
use "davidchr" if a direct reply is required.
Any opinions or policies stated within are my own and do not necessarily
constitute those of my employer.
I reside in Washington, USA, where Title 19 declares that sending me
Unsolicited Commercial Email can result in a $500 fine.
Harvesting of this address for purposes of bulk email (spam and UCE) is
expressly prohibited unless by my explicit prior request. I retaliate
viciously against spammers and spam sites.
> -----Original Message-----
> From: Andreas Hasenack [mailto:andreas at conectiva.com.br]
> Sent: Monday, September 30, 2002 3:27 PM
> To: Tony Hoyle
> Cc: kerberos at mit.edu
> Subject: Re: Win logon to a MIT Kerberos V KDC?
> Em Mon, Sep 30, 2002 at 10:26:17PM +0100, Tony Hoyle escreveu:
> > With no preauthentication login succeeds.
> It could have nothing to do with it, but at one time I had
> such a problem with krb5 on linux and win2k as a kdc, and it
> turned out to be a time offset problem (since preauth is
> basically timestamp). But not a "regular" offset problem,
> time was synced within 10s tops. Know what it was? Daylight
> saving :) Somehow the two machines (kdc and client) didn't
> agree about the timezone even though the "date/time" commands
> showed no difference.
> Kerberos mailing list Kerberos at mit.edu
More information about the Kerberos