clock skew

Volkmar Glauche volkmar.glauche at uniklinik-freiburg.de
Fri Aug 31 04:36:32 EDT 2007


Instead of allowing a clock skew, you should better think about how you 
can synchronise client and server clocks to a common clock source (i.e. 
via NTP).

Volkmar

On Fri, 31 Aug 2007, a a wrote:

> Hi,
> I'd like to authenticate a client with the krb server with a time diffference > 5 min.
> In native, I have the message : "clockskew too great....."
> With the clocskew propertie in /etc/krb5.conf (of both machines), logs messages are OK on the server but the authentication doesn't work either...
> Can yu tell me how to use clockskew ?
>
> configuration : RHEL 4 - MIT Kerberos 1.3.4.17
>
> Thanks.
>
>
> ---------------------------------
> Ne gardez plus qu'une seule adresse mail ! Copiez vos mails vers Yahoo! Mail
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>

-- 
Volkmar Glauche
-
Department of Neurology		volkmar.glauche at uniklinik-freiburg.de
Universitaetsklinikum Freiburg	Phone	49(0)761-270-5331
Breisacher Str. 64		Fax	49(0)761-270-5416
79106 Freiburg			http://fbi.uniklinik-freiburg.de/



More information about the Kerberos mailing list