clock skew

[Danny Mayer]

a a wrote:
> Hi,
> I'd like to authenticate a client with the krb server with a time diffference > 5 min.
> In native, I have the message : "clockskew too great....."
> With the clocskew propertie in /etc/krb5.conf (of both machines), logs messages are OK on the server but the authentication doesn't work either...
> Can yu tell me how to use clockskew ?
> 

You can't. It would violate the RFC's. You should be looking at how to
synchronize your clocks. NTP is the usual and best solution.

Danny