MS cache format

Jeffrey Altman jaltman2 at nyc.rr.com
Tue Aug 22 09:37:28 EDT 2006


preetam R wrote:
> Hi,
> 
>     Does MS cache store the time offsets so that the
> client can synch time with kdc's time as MIT client
> does.
> 
> 
> Thanks,
> Preetam

I do not believe so.  All Windows machines that support
Kerberos also support time synchronization via NTP and
all workstations in a domain synchronize the machine time
to the domain controllers during machine startup.  Therefore,
there would be little need for them to do so.

Even if they did, that information is not exported by
the Lsa API.

Jeffrey Altman




More information about the Kerberos mailing list