mayer at ntp.isc.org
Wed Aug 16 08:13:49 EDT 2006
preetam R wrote:
> As I under from the kerberos admin guide, the
> option, kdc_timesync enables the kerberos client to
> make up for the time difference between its system
> time and kdc's time.
> But, then does this mean that even the application
> server must also be in sync with kdc's time. Since,
> the timestamp used in the Service Ticket is based on
> kdc's time.
Install NTP on all systems. That way you avoid the problem in the first
place. The limit between two systems using Kerberos is 5 minutes which
is hardly an onerous requirement.
More information about the Kerberos