Use of clock_skew option on Client side krb5.conf file

[sandypossible@gmail.com]

Hi all,

I have a query regaqrding specifying the clock_skew in the client side
( kerberos client) krb5.conf file. As  I understand, the maximum
allowable time skew is determined by KDC. Please let me know whether my
understanding is correct.

I want to understand the use of specifying the clock_skew in the client
side krb5.conf file. For example on KDC krb5.conf file, the maximum
allowable clock skew is say 600 seconds. On the client krb5.conf file I
specify clock_skew = 1200 seconds. What will be the effect ? Will KDC
accept the request if time difference is greater than 600 but with in
1200 ?

Could you please explain?

- Sandy.